PT-2023-3082 · Linux+9 · Linux Kernel+9

Yang Lan · Published 2023-04-28 · Updated 2024-11-21 · CVE-2023-3212

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue was found in the gfs2 file system. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2023:7077

ALT-PU-2023-4401

ALT-PU-2023-4482

ALT-PU-2023-4530

ALT-PU-2023-4663

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27308

BDU:2023-03169

CESA-2023_6901

CESA-2023_7077

CVE-2023-3212

DLA-3623-1

DLA-3710-1

DSA-5448-1

DSA-5480-1

MGASA-2023-0201

MGASA-2023-0202

OESA-2023-1394

OESA-2023-1395

OESA-2023-1396

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2023_2892-1

OPENSUSE-SU-2023_3302-1

RHSA-2023:6583

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_6901

RHSA-2023_7077

SUSE-SU-2023:2803-1

SUSE-SU-2023:2820-1

SUSE-SU-2023:2831-1

SUSE-SU-2023:2871-1

SUSE-SU-2023:2892-1

SUSE-SU-2023:3302-1

USN-6231-1

USN-6339-1

USN-6339-2

USN-6339-3

USN-6339-4

USN-6350-1

USN-6351-1

USN-6388-1

USN-6396-1

USN-6396-2

USN-6396-3

USN-6412-1

USN-6417-1

USN-6466-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 919

• https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636 · Patch
• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42753 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0201 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3867 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-34319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45919 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6339-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1206 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6396-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34256 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-42755 · Vendor Advisory