2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/refs/","packageName":"ubuntu-linux","platforms":["Linux"],"product":"ubuntu-linux","repo":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/","vendor":"Canonical Ltd.","versions":[{"lessThan":"02b47547824b1cd0d55c6744f91886f04de8947e","status":"affected","version":"0","versionType":"commit"}]}],"source":"security@ubuntu.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*","matchCriteriaId":"902B8056-9E37-443B-8905-8AA93E2447FB","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*","matchCriteriaId":"359012F1-2C63-415A-88B8-6726A87830DE","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*","matchCriteriaId":"47842532-D2B6-44CB-ADE2-4AC8630A4D8C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock)."}],"id":"CVE-2023-2612","lastModified":"2026-06-17T05:53:00.730","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":3.6,"source":"security@ubuntu.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2612","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-10T16:47:19.729691Z","version":"2.0.3"}}]},"published":"2023-05-31T00:15:10.257","references":[{"source":"security@ubuntu.com","url":"http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"},{"source":"security@ubuntu.com","tags":["Mailing List","Patch"],"url":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e"},{"source":"security@ubuntu.com","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/CVE-2023-2612"},{"source":"security@ubuntu.com","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6122-1"},{"source":"security@ubuntu.com","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6123-1"},{"source":"security@ubuntu.com","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6124-1"},{"source":"security@ubuntu.com","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6127-1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/kinetic/commit/?id=02b47547824b1cd0d55c6744f91886f04de8947e"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/CVE-2023-2612"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6122-1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6123-1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6124-1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://ubuntu.com/security/notices/USN-6127-1"}],"sourceIdentifier":"security@ubuntu.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-667"}],"source":"security@ubuntu.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-667"}],"source":"nvd@nist.gov","type":"Primary"}]}
|