{"id":"DEBIAN-CVE-2023-53214","details":"In the Linux kernel, the following vulnerability has been resolved:  f2fs: fix to avoid potential memory corruption in __update_iostat_latency()  Add iotype sanity check to avoid potential memory corruption. This is to fix the compile error below:  fs/f2fs/iostat.c:231 __update_iostat_latency() error: buffer overflow 'io_lat-\u003epeak_lat[type]' 3 \u003c= 3  vim +228 fs/f2fs/iostat.c    211  static inline void __update_iostat_latency(struct bio_iostat_ctx \t*iostat_ctx,   212\t\t\t\t\tenum iostat_lat_type type)   213  {   214\t\tunsigned long ts_diff;   215\t\tunsigned int page_type = iostat_ctx-\u003etype;   216\t\tstruct f2fs_sb_info *sbi = iostat_ctx-\u003esbi;   217\t\tstruct iostat_lat_info *io_lat = sbi-\u003eiostat_io_lat;   218\t\tunsigned long flags;   219   220\t\tif (!sbi-\u003eiostat_enable)   221\t\t\treturn;   222   223\t\tts_diff = jiffies - iostat_ctx-\u003esubmit_ts;   224\t\tif (page_type \u003e= META_FLUSH)                                  ^^^^^^^^^^    225\t\t\tpage_type = META;   226   227\t\tspin_lock_irqsave(&sbi-\u003eiostat_lat_lock, flags);  @228\t\tio_lat-\u003esum_lat[type][page_type] += ts_diff;                                       ^^^^^^^^^ Mixup between META_FLUSH and NR_PAGE_TYPE leads to memory corruption.","modified":"2026-09-15T09:02:42.336377253Z","published":"2025-09-15T15:15:48.027Z","upstream":["CVE-2023-53214"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53214"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53214.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53214.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53214.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}