Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52704

freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted that commit f5d39b020809 ("freezer,sched: Rewrite core freezer logic") broke call_usermodehelper_exec() for the KILLABLE case. Specifically it was missed that the second, unconditional, wait_for_completion() was not optional and ensures the on-stack completion is unused before going out-of-scope.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f5d39b020809146cc28e6e73369bf8065e0310aa to < 7f9f6c54da876b3f0bece2b569456ceb96965ed7affected
  • f5d39b020809146cc28e6e73369bf8065e0310aa to < eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037daffected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.13 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References