---
id: CVE-2023-2269
title: >-
  A denial of service problem was found, due to a possible recursive locking
  scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in
  the Linux Kernel Device Mapper-Multipathing sub-component.
summary: >-
  A denial of service problem was found, due to a possible recursive locking
  scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in
  the Linux Kernel Device Mapper-Multipathing sub-component.
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-413
  - CWE-667
  - CWE-833
vendor: linux
product: linux_kernel
affected:
  - linux_kernel = 6.2
  - fedora = 36
  - fedora = 37
  - fedora = 38
  - debian_linux = 10.0
  - debian_linux = 11.0
  - debian_linux = 12.0
  - h300s_firmware
  - h500s_firmware
  - h700s_firmware
  - h410s_firmware
  - h410c_firmware
published: '2023-04-25'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T22:17:23.337'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-2269'
references:
  - url: 'https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html'
    label: secalert@redhat.com
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: secalert@redhat.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/
    label: secalert@redhat.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/
    label: secalert@redhat.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/
    label: secalert@redhat.com
  - url: 'https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/'
    label: secalert@redhat.com
  - url: 'https://security.netapp.com/advisory/ntap-20230929-0004/'
    label: secalert@redhat.com
  - url: 'https://www.debian.org/security/2023/dsa-5448'
    label: secalert@redhat.com
  - url: 'https://www.debian.org/security/2023/dsa-5480'
    label: secalert@redhat.com
  - url: 'https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63AJUCJTZCII2JMAF7MGZEM66KY7IALT/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBLBKW2WM5YSTS6OGEU5SYHXSJ5EWSTV/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXHBLWYNSUBS77TYPOJTADPDXKBH2F4U/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV%40redhat.com/t/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20230929-0004/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2023/dsa-5448'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2023/dsa-5480'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2269.json
  - url: 'https://access.redhat.com/security/cve/CVE-2023-2269'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2189388'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2023-2269'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-2269'
  - url: 'https://lore.kernel.org/lkml/ZD1xyZxb3rHot8PV@redhat.com/t/'
  - url: 'https://access.redhat.com/errata/RHSA-2023:7077'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00224
epssPercentile: 0.12949
ingestedAt: '2026-10-08T23:16:47.349Z'
patched:
  - enterprise_linux_baseos_v_8
  - codeready_linux_builder_v_8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-08T21:11:00.011036Z'
---

## Overview

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.

## Affected

- `linux_kernel = 6.2`
- `fedora = 36`
- `fedora = 37`
- `fedora = 38`
- `debian_linux = 10.0`
- `debian_linux = 11.0`
- `debian_linux = 12.0`
- `h300s_firmware`
- `h500s_firmware`
- `h700s_firmware`
- `h410s_firmware`
- `h410c_firmware`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **RHSA-2023:7077** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat CodeReady Linux Builder (v. 8) · released 2023-11-14 · [advisory](https://access.redhat.com/errata/RHSA-2023:7077)
- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-10 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-2269.json)