PT-2023-3081 · Linux+2 · Linux Kernel+2

Jean-Baptiste Cayrou · Published 2023-05-30 · Updated 2024-01-12 · CVE-2023-2612

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ubuntu Linux kernel (affected versions not specified)

Description The shiftfs file system in the Ubuntu Linux kernel contains a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock). The issue is related to concurrent access to inode, which can lead to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Locking

Race Condition

Weakness Enumeration

CWE-667

CWE-362

Related Identifiers

BDU:2023-03164

CVE-2023-2612

LSN-0095-1

USN-6122-1

USN-6123-1

USN-6124-1

USN-6127-1

USN-6131-1

USN-6132-1

USN-6135-1

USN-6150-1

USN-6162-1

USN-6175-1

USN-6186-1

USN-6222-1

USN-6256-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 79

• 🔥 https://github.com/Liuk3r/CVE-2023-32233 · Exploit
• 🔥 https://github.com/lanleft/CVE-2023-1829 · Exploit
• 🔥 https://github.com/oferchen/POC-CVE-2023-32233 · Exploit
• 🔥 https://github.com/PIDAN-HEIDASHUAI/CVE-2023-32233 · Exploit
• https://ubuntu.com/security/CVE-2023-1670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2985 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1829 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2612 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6123-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-2612 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26545 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2612 · Security Note
• https://osv.dev/vulnerability/USN-6222-1 · Vendor Advisory