CVE-2023-2269

Advisory lineage Upstream: 0 Downstream: 35
Modified
Published: 25 Apr 2023, 00:00
Last modified:02 Aug 2024, 06:19

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.4 MEDIUM
v3.1 (nvd)
EPSS Score
0.03% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Apr 2023, 00:00
Published
Vulnerability first disclosed
02 Aug 2024, 06:19
Last Modified
Vulnerability information updated

Description

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.03%• Percentile: 8%

Techniques & Countermeasures

  • CWE-667•Improper Locking

    The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

  • CWE-413•Improper Resource Locking

    The product does not lock or does not correctly lock a resource when the product must have exclusive access to the resource.

Affected Systems

  • debian•debian_linux

    10.0 | 11.0 | 12.0

  • fedoraproject•fedora

    36 | 37 | 38

  • linux•linux_kernel

    6.2

  • netapp•h300s_firmware

    na

  • netapp•h410c_firmware

    na

  • netapp•h410s_firmware

    na

  • netapp•h500s_firmware

    na

  • netapp•h700s_firmware

    na

References (9)