PT-2023-8766 · Linux+10 · Linux Kernel+10

Published 2023-12-18 · Updated 2025-09-29 · CVE-2023-52448

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference vulnerability has been identified in the Linux kernel, specifically in the gfs2 rgrp dump() function. This issue can occur when creating rgd->rd gl fails in read rindex entry(), allowing an attacker to potentially cause a denial of service. The vulnerability is related to the gfs2 file system module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:2394

ALSA-2024:2950

ALSA-2024:3138

ALSA-2024_2394

ALSA-2025_16880

ALT-PU-2024-17576

ALT-PU-2024-3291

ALT-PU-2024-4263

ALT-PU-2024-4623

ALT-PU-2024-4843

BDU:2024-01848

CESA-2024_2950

CESA-2024_3138

CVE-2023-52448

DLA-3841-1

INFSA-2024_2394

INFSA-2024_2950

INFSA-2024_3138

OESA-2024-1298

OESA-2024-1299

OESA-2024-1300

OESA-2024-1301

OPENSUSE-SU-2024_0857-1

OPENSUSE-SU-2024_0858-1

RHSA-2024:2394

RHSA-2024:2950

RHSA-2024:3138

RHSA-2024:5255

RHSA-2024:5281

RHSA-2024:5364

RHSA-2024:5365

RHSA-2024_2394

RHSA-2024_2950

RHSA-2024_3138

RLSA-2024:2950

RLSA-2024:3138

SUSE-SU-2024:0855-1

SUSE-SU-2024:0856-1

SUSE-SU-2024:0857-1

SUSE-SU-2024:0858-1

SUSE-SU-2024:0900-1

SUSE-SU-2024:0900-2

SUSE-SU-2024:0910-1

SUSE-SU-2024:0926-1

SUSE-SU-2024:0977-1

USN-6688-1

USN-6725-1

USN-6725-2

USN-6726-1

USN-6726-2

USN-6726-3

USN-6765-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 749

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52448.json · Exploit
• https://ubuntu.com/security/CVE-2023-52480 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52690 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2394.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26598 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52452 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52635 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0926-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35838 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1298 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52451 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52608 · Vendor Advisory