CVE-2023-3212

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

CVSS 3.1

4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-25)

CWE

CWE-476

Published

2023-06-23

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• fedoraproject:fedora
• linux:linux_kernel
• netapp:h300s_firmware
• netapp:h410c_firmware
• netapp:h410s_firmware
• netapp:h500s_firmware
• netapp:h700s_firmware
• redhat:enterprise_linux

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2214348
• https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
• https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
• https://security.netapp.com/advisory/ntap-20230929-0005/

Check your stackJSON