CVE-2023-2269: debian debian_linux Improper Resource Locking
Vulnerability summary
CVE-2023-2269 is a medium (CVSS 4.4) Improper Resource Locking vulnerability in debian debian_linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 13.1% of scored vulnerabilities.
Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 33 · Related 24Timeline
- 25-04-2023PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated4.4MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated4.4MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
13%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.22% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-413Improper Resource LockingThe product must have exclusive access to a resource, but it does not lock or does not correctly lock that resource.
- CWE-667Improper LockingThe product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Affected systems
Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu99 products
- linuxAll versions (No fix recorded) | < 4.4.0-244.278 | < 4.15.0-216.227 | < 5.4.0-162.179 | < 5.15.0-79.86
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1122.128 | < 4.4.0-1160.175 | < 4.15.0-1160.173 | < 5.4.0-1109.118 | < 5.15.0-1042.47
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Netapp5 products
Debian2 products
- linux< 6.1.37-1 | < 6.3.7-1
- debian_linuxEOL10.0 | 11.0 | 12.0
Fedoraproject1 product
- fedoraEOL36 | 37 | 38
Linux1 product
- linux_kernelEOL6.2
5 vendors · 108 products
References
29 links- lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/Vendor Advisory
- security.netapp.com/advisory/ntap-20230929-0004/Third Party Advisory