Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump Syzkaller has reported a NULL pointer dereference when accessing rgd->rd_rgl in gfs2_rgrp_dump(). This can happen when creating rgd->rd_gl fails in read_rindex_entry(). Add a NULL pointer check in gfs2_rgrp_dump() to prevent that.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.20, < 5.4.268 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/067a7c48c2c70f05f9460d6f0e8423e234729f05Patch
- https://git.kernel.org/stable/c/5c28478af371a1c3fdb570ca67f110e1ae60fc37Patch
- https://git.kernel.org/stable/c/8877243beafa7c6bfc42022cbfdf9e39b25bd4faPatch
- https://git.kernel.org/stable/c/c323efd620c741168c8e0cc6fc0be04ab57e331aPatch
- https://git.kernel.org/stable/c/d69d7804cf9e2ba171a27e5f98bc266f13d0414aPatch
- https://git.kernel.org/stable/c/ee0586d73cbaf0e7058bc640d62a9daf2dfa9178Patch
- https://git.kernel.org/stable/c/efc8ef87ab9185a23d5676f2f7d986022d91bcdePatch
- https://git.kernel.org/stable/c/067a7c48c2c70f05f9460d6f0e8423e234729f05Patch
- https://git.kernel.org/stable/c/5c28478af371a1c3fdb570ca67f110e1ae60fc37Patch
- https://git.kernel.org/stable/c/8877243beafa7c6bfc42022cbfdf9e39b25bd4faPatch
- https://git.kernel.org/stable/c/c323efd620c741168c8e0cc6fc0be04ab57e331aPatch
- https://git.kernel.org/stable/c/d69d7804cf9e2ba171a27e5f98bc266f13d0414aPatch
- https://git.kernel.org/stable/c/ee0586d73cbaf0e7058bc640d62a9daf2dfa9178Patch
- https://git.kernel.org/stable/c/efc8ef87ab9185a23d5676f2f7d986022d91bcdePatch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
FAQ
What is CVE-2023-52448?
CVE-2023-52448 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump Syzkaller has reported a NULL pointer dereference when accessing rgd->...
How severe is CVE-2023-52448?
CVE-2023-52448 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-52448?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.