CVE-2023-2612CWE-667

shiftfs lock unbalance in Ubuntu-specific kernels

Medium · published May 30, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.9th percentile
Weakness
CWE-667 · Improper Locking
Published
2023-05-30T23:12Z
EPSS history
Timeline
  • 30 MAY 23:12Z
    shiftfs lock unbalance in Ubuntu-specific kernels
    cvelistv5