CVE-2023-52704

CVE-2023-52704

High · published May 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL

Tetsuo-San noted that commit f5d39b020809 ("freezer,sched: Rewrite

core freezer logic") broke call_usermodehelper_exec() for the KILLABLE

case.

Specifically it was missed that the second, unconditional,

wait_for_completion() was not optional and ensures the on-stack

completion is unused before going out-of-scope.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.6th percentile
Published
2024-05-21T20:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1, < 6.1.136.1.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/7f9f6c54da876b3f0bece2b569456ceb96965ed7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7f9f6c54da876b3f0bece2b569456ceb96965ed7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037d · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 MAY 15:22Z
    freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL
    cvelistv5