CVE-2023-2269

moderate-risk

Published 2023-04-25

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

Do I need to act?

0.02% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.4/10 Medium

LOCAL / LOW complexity

Affected Products (12)

Linux Kernel

Fedora

Debian Linux

H300S Firmware

H500S Firmware

H700S Firmware

H410S Firmware

H410C Firmware

Affected Vendors

Debian Linux Fedoraproject Netapp

References (18)

Mailing List https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html

Mailing List https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

Mailing List https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Vendor Advisory https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/

Third Party Advisory https://security.netapp.com/advisory/ntap-20230929-0004/

Third Party Advisory https://www.debian.org/security/2023/dsa-5448

Third Party Advisory https://www.debian.org/security/2023/dsa-5480

Mailing List https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html

Mailing List https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

Mailing List https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Vendor Advisory https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/

Third Party Advisory https://security.netapp.com/advisory/ntap-20230929-0004/

Third Party Advisory https://www.debian.org/security/2023/dsa-5448

Third Party Advisory https://www.debian.org/security/2023/dsa-5480

/ 100

moderate-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 17/34 · Moderate