Null Pointer Dereference in Linux Kernel Affecting Various Distributions

CVE-2023-54313

What is CVE-2023-54313?

A vulnerability in the Linux Kernel allows for a null pointer dereference in the 'ovl_get_acl_rcu' function, potentially causing system instability and crashes. This issue arises when the system attempts to access a real inode that has not been properly initialized, resulting in a dereference of a null pointer during access checks. The flaw can affect various Linux distributions. It is critical for system administrators to apply patches to mitigate this risk and ensure ongoing system reliability.

References