Kernel: jfs: null pointer dereference in dbfree()
Published Aug 16, 2023
5.5
MEDIUMCVSS 3.1
EPSS 0.23%
Description
A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.
Affected products
No data.
- ≤ 5.18.19
No data.
Red Hat Enterprise Linux 6
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
As the Journaling File System (JFS) is not enabled by default, this flaw does not affect any of the supported RHEL kernels, except RHEL 6.
References (5)
- https://access.redhat.com/security/cve/CVE-2023-4385 vdb-entryx_refsource_REDHATThird Party AdvisoryVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2219272 issue-trackingx_refsource_REDHATIssue TrackingThird Party Advisory
- https://github.com/torvalds/linux/commit/0d4837fdb796f99369cf7691d33de1b856bcaf1f Patch
- https://nvd.nist.gov/vuln/detail/CVE-2023-4385
- https://www.cve.org/CVERecord?id=CVE-2023-4385
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2023-4385 | vdb-entryx_refsource_REDHATThird Party AdvisoryVendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2219272 | issue-trackingx_refsource_REDHATIssue TrackingThird Party Advisory | |
| https://github.com/torvalds/linux/commit/0d4837fdb796f99369cf7691d33de1b856bcaf1f | Patch | |
| https://nvd.nist.gov/vuln/detail/CVE-2023-4385 | ||
| https://www.cve.org/CVERecord?id=CVE-2023-4385 |
Change history (0)
No recorded changes yet.