PT-2023-3081 · Linux+2 · Linux Kernel+2

Jean-Baptiste Cayrou · Publicado 2023-05-30 · Atualizado 2024-01-12 · CVE-2023-2612

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ubuntu Linux kernel (affected versions not specified)

Description The shiftfs file system in the Ubuntu Linux kernel contains a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock). The issue is related to concurrent access to inode, which can lead to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Locking

Race Condition

Enumeração de Fraquezas

CWE-667

CWE-362

Identificadores relacionados

BDU:2023-03164

CVE-2023-2612

LSN-0095-1

USN-6122-1

USN-6123-1

USN-6124-1

USN-6127-1

USN-6131-1

USN-6132-1

USN-6135-1

USN-6150-1

USN-6162-1

USN-6175-1

USN-6186-1

USN-6222-1

USN-6256-1

Produtos afetados

Linuxmint

Linux Kernel

Ubuntu

Referências · 79

• 🔥 https://github.com/Liuk3r/CVE-2023-32233 · Exploit
• 🔥 https://github.com/lanleft/CVE-2023-1829 · Exploit
• 🔥 https://github.com/oferchen/POC-CVE-2023-32233 · Exploit
• 🔥 https://github.com/PIDAN-HEIDASHUAI/CVE-2023-32233 · Exploit
• https://ubuntu.com/security/CVE-2023-1670 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-1079 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-2985 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-1829 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-2612 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6123-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-2612 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-26545 · Aviso do Fabricante
• https://t.me/cvenotify/51819 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2022-3108 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/9772 · Publicação no Telegram