IM
IronMonkey Threat Research

CVE-2023-3212 MEDIUM

Published: 2023-06-23 | Last Modified: 2024-11-21 | Status: Modified

Description

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

CVSS Metrics

Base Score: 4.4 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 0.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-476
[email protected] Primary
en CWE-476

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd3854bde80> Operating System
linux linux_kernel 6.4 <built-in method update of dict object at 0x7fd341254400> Operating System
fedoraproject fedora 38 <built-in method update of dict object at 0x7fd3856158c0> Operating System
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd36971e6c0> Operating System
redhat enterprise_linux 9.0 <built-in method update of dict object at 0x7fd289dc6b00> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd289dc7540> Operating System
debian debian_linux 11.0 <built-in method update of dict object at 0x7fd3867196c0> Operating System
debian debian_linux 12.0 <built-in method update of dict object at 0x7fd2a1e24780> Operating System
netapp h300s_firmware - <built-in method update of dict object at 0x7fd385616840> Operating System
netapp h500s_firmware - <built-in method update of dict object at 0x7fd289dc4480> Operating System
netapp h700s_firmware - <built-in method update of dict object at 0x7fd360108100> Operating System
netapp h410s_firmware - <built-in method update of dict object at 0x7fd3844a1e00> Operating System
netapp h410c_firmware - <built-in method update of dict object at 0x7fd2dbe0eb40> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

References