Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2023-52704
HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52704

2024-05-2116:15:12
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
3
linux kernel
vulnerability
call_usermode_helper_exec
issue fixed
cve-2023-52704
tetsuo-san

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved:

freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL

Tetsuo-San noted that commit f5d39b020809 (“freezer,sched: Rewrite
core freezer logic”) broke call_usermodehelper_exec() for the KILLABLE
case.

Specifically it was missed that the second, unconditional,
wait_for_completion() was not optional and ensures the on-stack
completion is unused before going out-of-scope.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%