QwikSec

Security Database

CVE

CWE

Training

CVE-2023-3212

Published: Jun 23, 2023

Modified: Aug 2, 2024

PUBLISHED

Description

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

Vendor	Product	Versions
n/a	Linux kernel (gfs2 file system)	affected `Fixed in kernel 6.4-rc2`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2214348

https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636

vendor-advisory

vendor-advisory

https://security.netapp.com/advisory/ntap-20230929-0005/

[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update

mailing-list

[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.