CVEvulnerability
CVE-2023-3212
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-23
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
Affected configurations
• linux linux kernel (< 6.4)
• linux linux kernel 6.4
• fedoraproject fedora 38
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• debian debian linux 10.0
• debian debian linux 11.0
• debian debian linux 12.0
• netapp h300s firmware
• netapp h500s firmware
• netapp h700s firmware
• netapp h410s firmware
• netapp h410c firmware
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2214348 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636 Patch
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html lists.debian.org
- https://security.netapp.com/advisory/ntap-20230929-0005/ Third Party Advisory
- https://www.debian.org/security/2023/dsa-5448 Third Party Advisory
- https://www.debian.org/security/2023/dsa-5480 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2214348 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636 Patch
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html lists.debian.org
- https://security.netapp.com/advisory/ntap-20230929-0005/ Third Party Advisory
- https://www.debian.org/security/2023/dsa-5448 Third Party Advisory
- https://www.debian.org/security/2023/dsa-5480 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html cert-portal.siemens.com