Vulnerability · Published Jun 23, 2023 · Assigned by redhat
CVE-2023-3212
Medium 4.4
In plain English
A medium-severity null pointer dereference in Linux kernel (gfs2 file system). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)4.4Medium
Exploit odds (30 days)0.3%top 79.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-core | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-debug | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-devel | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-doc | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-headers | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-modules | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-tools | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | perf | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| AlmaLinux:8 | python3-perf | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
| Debian:12 | linux | 6.1.37-1 | DEBIAN-CVE-2023-3212 |
| Debian:12 | linux | 6.1.37-1 | DSA-5448-1 |
| Debian:13 | linux | 6.3.7-1 | DEBIAN-CVE-2023-3212 |
| Debian:14 | linux | 6.3.7-1 | DEBIAN-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux | 5.15.0-83.92 | USN-6339-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-83.92 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1044.49 | USN-6350-1 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1044.49 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1013.13~22.04.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | 6.2.0-1013.13~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1046.53 | USN-6339-3 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1046.53 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1014.14~22.04.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | 6.2.0-1014.14~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1046.53.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1046.53.1 | USN-6339-3 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | 6.2.0-1014.14~22.04.1.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | 6.2.0-1014.14~22.04.1.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1041.49 | USN-6339-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1041.49 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1016.18~22.04.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | 6.2.0-1016.18~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1041.46 | USN-6351-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1041.46 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1027.32 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1027.32 | USN-6351-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-34.34~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | 6.2.0-34.34~22.04.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1037.40 | USN-6339-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1037.40 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1039.45 | USN-6339-4 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1039.45 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1041.46 | USN-6339-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1041.46 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-83.92 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-83.92 | USN-6339-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1014.14~22.04.1 | USN-6412-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1014.14~22.04.1 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1032.32 | USN-6339-1 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1032.32 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1011.11 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | 6.2.0-1011.11 | USN-6466-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1017.17 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1004.4 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1016.16 | USN-6231-1 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1016.16 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1042.48 | USN-6350-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1042.48 | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1037.40 | USN-6339-3 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1037.40 | UBUNTU-CVE-2023-3212 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-3212 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1025.29 | UBUNTU-CVE-2023-3212 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Linux kernel (gfs2 file system) | Fixed in kernel 6.4-rc2 |
Weakness: CWE-476
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2214348
- https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636
- DSA-5448 vendor-advisory
- DSA-5480 vendor-advisory
- https://security.netapp.com/advisory/ntap-20230929-0005/
- [debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update mailing-list
- [debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update mailing-list
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html