There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 26, 2023 · NIST NVD

   Detected

   There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

2. Oct 14, 2026 · NIST NVD

   Updated

   There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

Affected

• cpe debian/debian linux10.0
• cpe debian/debian linux11.0
• cpe debian/debian linux12.0
• cpe linux/linux kernelversion unspecified
• cpe netapp/h300s firmwareversion unspecified
• cpe netapp/h410c firmwareversion unspecified
• cpe netapp/h410s firmwareversion unspecified
• cpe netapp/h500s firmwareversion unspecified
• cpe netapp/h700s firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2023-2898

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2023-2898

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2023-2898

  There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

  nvd.nist.gov

References

• Mailing List · lists.debian.org
• Patch · lore.kernel.org
• Third Party Advisory · security.netapp.com
• Third Party Advisory · debian.org
• Third Party Advisory · debian.org