CVE-2023-2269

Опубликовано: 25 апр. 2023

Источник: nvd

CVSS3: 4.4

EPSS Низкий

Описание

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

Ссылки

https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/
Mailing List
Third Party Advisory
https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230929-0004/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5448
Third Party Advisory
https://www.debian.org/security/2023/dsa-5480
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/
Mailing List
Third Party Advisory
https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230929-0004/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5448
Third Party Advisory
https://www.debian.org/security/2023/dsa-5480
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:6.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.0002

Низкий

4.4 Medium

CVSS3

Дефекты

CWE-413

CWE-667

Связанные уязвимости

CVE-2023-2269

CVSS3: 4.4

ubuntu

около 2 лет назад

CVE-2023-2269

CVSS3: 4.4

redhat

около 2 лет назад

CVE-2023-2269

CVSS3: 4.4

debian

около 2 лет назад

A denial of service problem was found, due to a possible recursive loc ...

GHSA-354q-38f3-jh4j

CVSS3: 5.5

github

около 2 лет назад

BDU:2023-02523

CVSS3: 4.4

fstec

около 2 лет назад

Уязвимость функции table_clear() в модуле drivers/md/dm-ioctl.c драйвера device-mapper ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%

0.0002

Низкий

4.4 Medium

CVSS3

Дефекты

CWE-413

CWE-667