CVE-2023-2898 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer DereferenceCWE-362 — Race Condition25 documents6 sources
Severity
4.7MEDIUMNVD
OSV7.8OSV7.1
EPSS
0.0%
top 94.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelDebian LinuxDebian Linux
Timeline
PublishedMay 26
Latest updateSep 19

Description

There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6

Affected Packages3 packages

▶Debianlinux/linux_kernel< 5.10.191-1+3
▶Ubuntulinux/linux_kernel< 5.15.0-83.92
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Also affects: Debian Linux 10.0, 11.0, 12.0

Patches

Patch: lore.kernel.org ↗Patch: lore.kernel.org ↗

🔴Vulnerability Details

12
OSV
linux-oem-6.0 vulnerabilities↗2023-09-19
▶
OSV
linux-intel-iotg vulnerabilities↗2023-09-18
▶
OSV
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-raspi vulnerabilities↗2023-09-11
▶
OSV
linux-gcp, linux-gcp-6.2, linux-ibm, linux-oracle, linux-starfive vulnerabilities↗2023-09-08
▶
OSV
linux-gcp-5.15, linux-gkeop-5.15 vulnerabilities↗2023-09-08
▶

📋Vendor Advisories

12
Ubuntu
Linux kernel (OEM) vulnerabilities↗2023-09-19
▶
Ubuntu
Linux kernel (Intel IoTG) vulnerabilities↗2023-09-18
▶
Ubuntu
Linux kernel vulnerabilities↗2023-09-11
▶
Ubuntu
Linux kernel vulnerabilities↗2023-09-08
▶
Ubuntu
Linux kernel vulnerabilities↗2023-09-08
▶