Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-3212
HistoryJun 23, 2023 - 12:00 a.m.

CVE-2023-3212

2023-06-2300:00:00
ubuntu.com
ubuntu.com
13

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

1.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

A NULL pointer dereference issue was found in the gfs2 file system in the
Linux kernel. It occurs on corrupt gfs2 file systems when the evict code
tries to reference the journal descriptor structure after it has been freed
and set to NULL. A privileged local user could use this flaw to cause a
kernel panic.

Notes

Author Note
rodrigo-zaiden requires a corrupted gfs2 file system.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-218.229) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux< 5.4.0-164.181UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-83.92UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-34.34UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-4.4UNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu16.04noarchlinux< 4.4.0-245.279) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1161.174) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1111.120UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1044.49UNKNOWN
Rows per page:
1-10 of 1061

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

1.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%