CVE-2023-3212CWE-476

CVE-2023-3212

Medium · published June 24, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2023-06-24T00:15Z
Affected products (13)
ProductVersionsFixed in
linux/linux_kernel< 6.46.4
linux/linux_kernelall versions—
fedoraproject/fedoraall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
References (16)
EPSS history
Timeline
  • 23 JUN 00:00Z
    A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel
    cvelistv5