CVE-2023-3212: debian debian_linux NULL Pointer Dereference
Vulnerability summary
CVE-2023-3212 is a medium (CVSS 4.4) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 20.1% of scored vulnerabilities.
Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 29 · Related 20Timeline
- 23-06-2023PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated4.4MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated4.4MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.26% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu105 products
- linuxAll versions (No fix recorded) | < 4.4.0-245.279 | < 4.15.0-218.229 | < 5.4.0-164.181 | < 5.15.0-83.92
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1123.129 | < 4.4.0-1161.176 | < 4.15.0-1161.174 | < 5.4.0-1111.120 | < 5.15.0-1044.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Netapp5 products
Debian2 products
- linux< 6.1.37-1 | < 6.3.7-1
- debian_linuxEOL10.0 | 11.0 | 12.0
Fedoraproject1 product
- fedoraEOL38
Linux1 product
- linux_kernel< 6.4 | 6.4:rc1
Redhat1 product
- enterprise_linux8.0 | 9.0
6 vendors · 115 products
References
28 links- security.netapp.com/advisory/ntap-20230929-0005/Third Party Advisory