What’s Vulnerable › Vulnerabilities

CVE-2023-2612: shiftfs lock unbalance in Ubuntu-specific kernels

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-31 · updated 2026-06-17
• Weakness: CWE-667

Description

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

Affected products

• Canonical Ubuntu Linux: 20.04, 22.04, 22.10

References

• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
• https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e
• https://ubuntu.com/security/CVE-2023-2612
• https://ubuntu.com/security/notices/USN-6122-1
• https://ubuntu.com/security/notices/USN-6123-1
• https://ubuntu.com/security/notices/USN-6124-1
• https://ubuntu.com/security/notices/USN-6127-1
• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
• https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e
• https://ubuntu.com/security/CVE-2023-2612
• https://ubuntu.com/security/notices/USN-6122-1
• https://ubuntu.com/security/notices/USN-6123-1

Get alerted when CVE-2023-2612 or the next vulnerability affects your stack