CVE-2023-2612

2023-05-3000:00:00

ubuntu.com

cve-2023-2612 shiftfs file system ubuntu linux kernel inode locking race condition denial of service local attacker deadlock

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu
Linux kernel contained a race condition when handling inode locking in some
situations. A local attacker could use this to cause a denial of service
(kernel deadlock).

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-150.167UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-73.80UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-43.44UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-23.23UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1103.111UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1037.41UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1026.27UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1005.5UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1037.41~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1103.111~18.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-150.167	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-73.80	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-43.44	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-23.23	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1103.111	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1037.41	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1026.27	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1005.5	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1037.41~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1103.111~18.04.1	UNKNOWN