---
id: CVE-2023-3212
title: >-
  A NULL pointer dereference issue was found in the gfs2 file system in the
  Linux kernel
summary: >-
  A NULL pointer dereference issue was found in the gfs2 file system in the
  Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries
  to reference the journal descriptor structure after it has been freed and set
  to NUL…
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-476
  - CWE-476
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 6.4
  - linux_kernel = 6.4
  - fedora = 38
  - enterprise_linux = 8.0
  - enterprise_linux = 9.0
  - debian_linux = 10.0
  - debian_linux = 11.0
  - debian_linux = 12.0
  - h300s_firmware
  - h500s_firmware
  - h700s_firmware
  - h410s_firmware
  - h410c_firmware
patched:
  - linux_kernel 6.4
published: '2023-06-23'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T21:17:16.053'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-3212'
references:
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2214348'
    label: secalert@redhat.com
  - url: >-
      https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636
    label: secalert@redhat.com
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: secalert@redhat.com
  - url: 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'
    label: secalert@redhat.com
  - url: 'https://security.netapp.com/advisory/ntap-20230929-0005/'
    label: secalert@redhat.com
  - url: 'https://www.debian.org/security/2023/dsa-5448'
    label: secalert@redhat.com
  - url: 'https://www.debian.org/security/2023/dsa-5480'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2214348'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://github.com/torvalds/linux/commit/504a10d9e46bc37b23d0a1ae2f28973c8516e636
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20230929-0005/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2023/dsa-5448'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2023/dsa-5480'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-806742.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.00262
epssPercentile: 0.16772
ingestedAt: '2026-10-14T21:57:04.734Z'
---

## Overview

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

## Affected

- `linux_kernel < 6.4`
- `linux_kernel = 6.4`
- `fedora = 38`
- `enterprise_linux = 8.0`
- `enterprise_linux = 9.0`
- `debian_linux = 10.0`
- `debian_linux = 11.0`
- `debian_linux = 12.0`
- `h300s_firmware`
- `h500s_firmware`
- `h700s_firmware`
- `h410s_firmware`
- `h410c_firmware`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.4`