TI-2023-02442 Aliases CVE-2023-2612 GHSA-r34w-xrj9-cpvr

shiftfs lock unbalance in Ubuntu-specific kernels

LOW 21CWE-667Published 2023-05-30 · Updated 2025-02-13

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-667 and the CVSS impact.

Summary

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00284 21st percentileScored 2026-11-07

Fix Fixed ubuntu-linux (Canonical Ltd.): 02b47547824b1cd0d55c6744f91886f04de8947e

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Canonical	ubuntu-linux	before 02b47547824b1cd0d55c6744f91886f04de8947e	02b47547824b1cd0d55c6744f91886f04de8947e	Patch available	CNA

ubuntu-linux VendorCanonical Affected before 02b47547824b1cd0d55c6744f91886f04de8947e Fixed in 02b47547824b1cd0d55c6744f91886f04de8947e Patch available CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::	20.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts:::	22.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:22.10::::-:::	22.10	Vulnerable	Canonical

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* Versions 22.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:* Versions 22.10 Vulnerable ·Canonical

Remediation

Fix · CNA ubuntu-linux (Canonical Ltd.) Fixed in 02b47547824b1cd0d55c6744f91886f04de8947e

Timeline

2026-10-02 Threatist record created from CVE-2023-2612
2026-10-03 Alias added: GHSA-r34w-xrj9-cpvr

References

Patch 1

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e

Advisory 5

Other 1

http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

TI-2020-09349 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. KEVCVSS 3.1CRITICAL 9.8
TI-2020-05854 smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other… KEVCVSS 3.1CRITICAL 9.8
TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2019-12627 Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than… KEVCVSS 3.1CRITICAL 9.8
TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
TI-2019-07471 OS command injection in exim KEVCVSS 3.1CRITICAL 9.8

See all 4120 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences