Vulnerability Description
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 6.4 |
| Fedoraproject | Fedora | 38 |
| Redhat | Enterprise Linux | 8.0 |
| Debian | Debian Linux | 10.0 |
| Netapp | H300S Firmware | - |
| Netapp | H300S | - |
| Netapp | H500S Firmware | - |
| Netapp | H500S | - |
| Netapp | H700S Firmware | - |
| Netapp | H700S | - |
| Netapp | H410S Firmware | - |
| Netapp | H410S | - |
| Netapp | H410C Firmware | - |
| Netapp | H410C | - |
Related Weaknesses (CWE)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2214348Issue TrackingPatchThird Party Advisory
- https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e63Patch
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://security.netapp.com/advisory/ntap-20230929-0005/Third Party Advisory
- https://www.debian.org/security/2023/dsa-5448Third Party Advisory
- https://www.debian.org/security/2023/dsa-5480Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2214348Issue TrackingPatchThird Party Advisory
- https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e63Patch
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://security.netapp.com/advisory/ntap-20230929-0005/Third Party Advisory
- https://www.debian.org/security/2023/dsa-5448Third Party Advisory
- https://www.debian.org/security/2023/dsa-5480Third Party Advisory
FAQ
What is CVE-2023-3212?
CVE-2023-3212 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure a...
How severe is CVE-2023-3212?
CVE-2023-3212 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-3212?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Fedoraproject Fedora, Redhat Enterprise Linux, Debian Debian Linux, Netapp H300S Firmware.