PT-2023-2683 · Linux+7 · Linux Kernel+7

Zheng Zhang · Published 2023-04-17 · Updated 2024-02-27 · CVE-2023-2269

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A denial of service issue was discovered due to a possible recursive locking scenario, resulting in a deadlock in the table clear() function in the drivers/md/dm-ioctl.c file of the Linux Kernel Device Mapper-Multipathing sub-component. This issue can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Locking

Weakness Enumeration

CWE-413

CWE-667

Related Identifiers

BDU:2023-02523

CESA-2023_6901

CESA-2023_7077

CVE-2023-2269

DLA-3508-1

DLA-3623-1

DSA-5448-1

DSA-5480-1

MGASA-2023-0201

MGASA-2023-0202

OESA-2023-1274

OESA-2023-1275

OESA-2023-1276

OESA-2023-1277

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

RHSA-2023:6583

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_6901

RHSA-2023_7077

SUSE-SU-2023:2500-1

SUSE-SU-2023:2501-1

SUSE-SU-2023:2507-1

SUSE-SU-2023:2538-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2653-1

SUSE-SU-2023:2782-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

USN-6173-1

USN-6283-1

USN-6300-1

USN-6309-1

USN-6311-1

USN-6327-1

USN-6332-1

USN-6340-1

USN-6340-2

USN-6342-1

USN-6342-2

USN-6347-1

USN-6349-1

USN-6357-1

USN-6385-1

USN-6397-1

Affected Products

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

References · 781

• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32248 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-2269 · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0201 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6349-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12566.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2194 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1277 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1206 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-2269 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2166 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:2538-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6311-1 · Vendor Advisory