CVE-2023-3397

MediumCVSS 6.3/10Last modified Nov 7, 2026

Description

A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
Red HatRed Hat Enterprise Linux 6—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—

References

Timeline

Published
Nov 1, 2023
Last modified
Nov 7, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-339706.5Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a `missing access conCVE-2023-339715.4Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probablCVE-2023-339728.8Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to creaCVE-2023-339737.5RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In vCVE-2023-339745.9RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In vCVE-2023-339759.8RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In vCVE-2023-339767.5TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tenCVE-2023-339775.4Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to teCVE-2023-339796.5gpt_academic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gpt_academic 3.37 and prior. This issue affects soCVE-2023-33987.5Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.CVE-2023-339807.5Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) vCVE-2023-339816.5Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need
CVE-2023-3397: Medium severity, CVSS 6.3 | Vulnix