CVE-2023-2612 - Vulnerability Details - OpenCVE

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Canonical	Ubuntu Linux

Configuration 1 [-]

OR	cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:22.10::::-:::

No data.

References

Link	Providers
http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e
https://ubuntu.com/security/CVE-2023-2612
https://ubuntu.com/security/notices/USN-6122-1
https://ubuntu.com/security/notices/USN-6123-1
https://ubuntu.com/security/notices/USN-6124-1
https://ubuntu.com/security/notices/USN-6127-1

History

Fri, 10 Jan 2025 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2023-05-30T23:12:29.867Z

Updated: 2025-02-13T16:44:50.457Z

Reserved: 2023-05-10T01:02:51.624Z

Link: CVE-2023-2612

Vulnrichment

Updated: 2024-08-02T06:26:09.708Z

NVD

Status : Modified

Published: 2023-05-31T00:15:10.257

Modified: 2024-11-21T07:58:55.937

Link: CVE-2023-2612

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-2612", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2023-05-10T01:02:51.624Z", "datePublished": "2023-05-30T23:12:29.867Z", "dateUpdated": "2025-02-13T16:44:50.457Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/refs/", "packageName": "ubuntu-linux", "platforms": ["Linux"], "product": "ubuntu-linux", "repo": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/", "vendor": "Canonical Ltd.", "versions": [{"status": "affected", "version": "0", "lessThan": "02b47547824b1cd0d55c6744f91886f04de8947e", "versionType": "commit"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Jean-Baptiste Cayrou"}], "datePublic": "2023-05-30T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock)."}], "impacts": [{"capecId": "CAPEC-25", "descriptions": [{"lang": "en", "value": "CAPEC-25"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 4.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}, "format": "CVSS"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-667", "description": "CWE-667", "lang": "en", "type": "CWE"}]}], "references": [{"tags": ["patch"], "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e"}, {"tags": ["vendor-advisory"], "url": "https://ubuntu.com/security/CVE-2023-2612"}, {"tags": ["vendor-advisory"], "url": "https://ubuntu.com/security/notices/USN-6122-1"}, {"tags": ["vendor-advisory"], "url": "https://ubuntu.com/security/notices/USN-6123-1"}, {"tags": ["vendor-advisory"], "url": "https://ubuntu.com/security/notices/USN-6124-1"}, {"tags": ["vendor-advisory"], "url": "https://ubuntu.com/security/notices/USN-6127-1"}, {"url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"}], "title": "shiftfs lock unbalance in Ubuntu-specific kernels", "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2023-06-22T14:06:39.212Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:26:09.708Z"}, "title": "CVE Program Container", "references": [{"tags": ["patch", "x_transferred"], "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://ubuntu.com/security/CVE-2023-2612"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://ubuntu.com/security/notices/USN-6122-1"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://ubuntu.com/security/notices/USN-6123-1"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://ubuntu.com/security/notices/USN-6124-1"}, {"tags": ["vendor-advisory", "x_transferred"], "url": "https://ubuntu.com/security/notices/USN-6127-1"}, {"url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-10T16:47:19.729691Z", "id": "CVE-2023-2612", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-10T16:48:03.535Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e", "tags": ["patch", "x_transferred"]}, {"url": "https://ubuntu.com/security/CVE-2023-2612", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://ubuntu.com/security/notices/USN-6122-1", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://ubuntu.com/security/notices/USN-6123-1", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://ubuntu.com/security/notices/USN-6124-1", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://ubuntu.com/security/notices/USN-6127-1", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:26:09.708Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-2612", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-10T16:47:19.729691Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-10T16:47:58.742Z"}}], "cna": {"title": "shiftfs lock unbalance in Ubuntu-specific kernels", "credits": [{"lang": "en", "type": "finder", "value": "Jean-Baptiste Cayrou"}], "impacts": [{"capecId": "CAPEC-25", "descriptions": [{"lang": "en", "value": "CAPEC-25"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}], "affected": [{"repo": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/", "vendor": "Canonical Ltd.", "product": "ubuntu-linux", "versions": [{"status": "affected", "version": "0", "lessThan": "02b47547824b1cd0d55c6744f91886f04de8947e", "versionType": "commit"}], "platforms": ["Linux"], "packageName": "ubuntu-linux", "collectionURL": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/refs/"}], "datePublic": "2023-05-30T00:00:00.000Z", "references": [{"url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e", "tags": ["patch"]}, {"url": "https://ubuntu.com/security/CVE-2023-2612", "tags": ["vendor-advisory"]}, {"url": "https://ubuntu.com/security/notices/USN-6122-1", "tags": ["vendor-advisory"]}, {"url": "https://ubuntu.com/security/notices/USN-6123-1", "tags": ["vendor-advisory"]}, {"url": "https://ubuntu.com/security/notices/USN-6124-1", "tags": ["vendor-advisory"]}, {"url": "https://ubuntu.com/security/notices/USN-6127-1", "tags": ["vendor-advisory"]}, {"url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"}], "descriptions": [{"lang": "en", "value": "Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock)."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-667", "description": "CWE-667"}]}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2023-06-22T14:06:39.212Z"}}}, "cveMetadata": {"cveId": "CVE-2023-2612", "state": "PUBLISHED", "dateUpdated": "2025-02-13T16:44:50.457Z", "dateReserved": "2023-05-10T01:02:51.624Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2023-05-30T23:12:29.867Z", "assignerShortName": "canonical"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*", "matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*", "matchCriteriaId": "359012F1-2C63-415A-88B8-6726A87830DE", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*", "matchCriteriaId": "47842532-D2B6-44CB-ADE2-4AC8630A4D8C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock)."}], "id": "CVE-2023-2612", "lastModified": "2024-11-21T07:58:55.937", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "security@ubuntu.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-05-31T00:15:10.257", "references": [{"source": "security@ubuntu.com", "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"}, {"source": "security@ubuntu.com", "tags": ["Mailing List", "Patch"], "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/CVE-2023-2612"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6122-1"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6123-1"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6124-1"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6127-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch"], "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/CVE-2023-2612"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6122-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6123-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6124-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://ubuntu.com/security/notices/USN-6127-1"}], "sourceIdentifier": "security@ubuntu.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-667"}], "source": "security@ubuntu.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-667"}], "source": "nvd@nist.gov", "type": "Primary"}]}