Wind River Support Network

HomeDefectsLIN1022-4394
Fixed

LIN1022-4394 : Security Advisory - linux - CVE-2023-2898

Created: May 29, 2023    Updated: Feb 7, 2024
Resolved Date: Feb 2, 2024
Found In Version: 10.22.33.1
Fix Version: 10.22.33.14
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

CREATE(Triage):(User=admin) CVE-2023-2898 (https://nvd.nist.gov/vuln/detail/CVE-2023-2898)

CVEs


Live chat
Online