CVE-2023-52448

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump

Syzkaller has reported a NULL pointer dereference when accessing rgd->rd_rgl in gfs2_rgrp_dump(). This can happen when creating rgd->rd_gl fails in read_rindex_entry(). Add a NULL pointer check in gfs2_rgrp_dump() to prevent that.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 72244b6bc752b5c496f09de9a13c18adc314a53c, < efc8ef87ab9185a23d5676f2f7d986022d91bcde; >= 72244b6bc752b5c496f09de9a13c18adc314a53c, < 5c28478af371a1c3fdb570ca67f110e1ae60fc37; >= 72244b6bc752b5c496f09de9a13c18adc314a53c, < ee0586d73cbaf0e7058bc640d62a9daf2dfa9178; >= 72244b6bc752b5c496f09de9a13c18adc314a53c, < d69d7804cf9e2ba171a27e5f98bc266f13d0414a; >= 72244b6bc752b5c496f09de9a13c18adc314a53c, < 067a7c48c2c70f05f9460d6f0e8423e234729f05; >= 72244b6bc752b5c496f09de9a13c18adc314a53c, < c323efd620c741168c8e0cc6fc0be04ab57e331a; >= 72244b6bc752b5c496f09de9a13c18adc314a53c, < 8877243beafa7c6bfc42022cbfdf9e39b25bd4fa
LinuxLinux4.20

References

Timeline

Published
Feb 22, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-524495.5In the Linux kernel, the following vulnerability has been resolved: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier If botCVE-2023-52459.8FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside tCVE-2023-524505.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_tCVE-2023-524517.8In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlpar_memoCVE-2023-524527.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix accesses to uninit stack slots Privileged programs are supposCVE-2023-524535.5In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: Update migration data pointer correctly on saving/reCVE-2023-524545.5In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU lengthCVE-2023-524557.8In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the bootloader/firmwareCVE-2023-524565.5In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port aCVE-2023-524577.8In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_anCVE-2023-524585.5In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block sCVE-2023-524595.5In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion The list deletion call