CVE-2023-53616

A double-free vulnerability was found in the Linux kernel JFS filesystem's inode map cleanup. A local user with privileges to mount filesystems can mount a JFS filesystem, perform a remount operation that fails after freeing internal structures, then unmount the filesystem, causing the cleanup code to free the same memory twice, which results in memory corruption and denial of service through kernel crash.

During JFS filesystem cleanup, diUnmount() fails to set JFS_IP(ipimap)->i_imap to NULL after freeing it. When jfs_remount() frees this structure but then diMount() fails during remount processing, the pointer remains non-NULL. On subsequent filesystem unmount, diUnmount() executes again and attempts to free the already-freed pointer, causing a double-free detected by KASAN.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.