{"id":"CVE-2023-2269","title":"A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.","summary":"A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-413","CWE-667","CWE-833"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel = 6.2","fedora = 36","fedora = 37","fedora = 38","debian_linux = 10.0","debian_linux = 11.0","debian_linux = 12.0","h300s_firmware","h500s_firmware","h700s_firmware","h410s_firmware","h410c_firmware"],"published":"2023-04-25","updated":"2026-10-08","sourceUpdated":"2026-10-08T22:17:23.337","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-2269","references":[{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","label":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","label":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/","label":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/","label":"secalert@redhat.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/","label":"secalert@redhat.com"},{"url":"https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/","label":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20230929-0004/","label":"secalert@redhat.com"},{"url":"https://www.debian.org/security/2023/dsa-5448","label":"secalert@redhat.com"},{"url":"https://www.debian.org/security/2023/dsa-5480","label":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230929-0004/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5448","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5480","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2269.json"},{"url":"https://access.redhat.com/security/cve/CVE-2023-2269"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189388"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2269"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2269"},{"url":"https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV@redhat.com/t/"},{"url":"https://access.redhat.com/errata/RHSA-2023:7077"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.00224,"epssPercentile":0.12949,"ingestedAt":"2026-10-08T23:16:47.349Z","patched":["enterprise_linux_baseos_v_8","codeready_linux_builder_v_8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-08T21:11:00.011036Z"},"slug":"CVE-2023-2269","body":"## Overview\n\nA denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.\n\n## Affected\n\n- `linux_kernel = 6.2`\n- `fedora = 36`\n- `fedora = 37`\n- `fedora = 38`\n- `debian_linux = 10.0`\n- `debian_linux = 11.0`\n- `debian_linux = 12.0`\n- `h300s_firmware`\n- `h500s_firmware`\n- `h700s_firmware`\n- `h410s_firmware`\n- `h410c_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2023:7077** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat CodeReady Linux Builder (v. 8) · released 2023-11-14 · [advisory](https://access.redhat.com/errata/RHSA-2023:7077)\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-10 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2269.json)","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}