CVE-2023-3212

Description

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

References

https://www.debian.org/security/2023/dsa-5480

https://www.debian.org/security/2023/dsa-5448

https://security.netapp.com/advisory/ntap-20230929-0005/

https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636

https://bugzilla.redhat.com/show_bug.cgi?id=2214348

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3