Linux Kernel JFS Shift-Out-Of-Bounds Vulnerability in dbDiscardAG Function

A shift-out-of-bounds vulnerability has been identified in the Linux kernel's JFS (Journaled File System) implementation, specifically within the dbDiscardAG function. This vulnerability arises from improper handling of the bmap descriptor, which can be exploited by the syzbot fuzzer. The issue affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, potentially causing undefined behavior such as memory corruption or application crashes.

Reproduction

The vulnerability can be reproduced by using the syzbot fuzzer, which will feed invalid data into the bmap descriptor, triggering the out-of-bounds shift in the dbDiscardAG function.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. Instructions for downloading the latest kernel version can be found on the official Linux kernel website.