CVE-2023-2124

Updated: 2026-02-27 00:11:06.703992

Description:

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2024:1710164161 2024-03-11 09:55:19
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-06-15 09:07:34
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2024:1720468480 2024-07-23 17:31:56
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1695715460 2023-09-26 05:10:16
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1695716575 2023-09-26 05:10:16
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-06-15 09:07:34
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-06-15 09:07:34
RHEL 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1750353839 2025-06-20 00:28:01
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Released CLSA-2023:1689788960 2023-07-19 14:05:41
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Released CLSA-2023:1688072342 2023-06-29 17:05:10
Total: 11