Race Condition in Shiftfs File System Leads to Kernel Deadlock

CVE-2023-2612 · MEDIUM Severity

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.