Lucene search

K
redhatcveRedhat.comRH:CVE-2023-52704
HistoryMay 23, 2024 - 11:09 a.m.

CVE-2023-52704

2024-05-2311:09:11
redhat.com
access.redhat.com
1
linux kernel
vulnerability
cve-2023-52704
resolved
call_usermode_helper_exec
sigkill
tetsuo-san
wait_for_completion
on-stack completion

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved: freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted that commit f5d39b020809 (“freezer,sched: Rewrite core freezer logic”) broke call_usermodehelper_exec() for the KILLABLE case. Specifically it was missed that the second, unconditional, wait_for_completion() was not optional and ensures the on-stack completion is unused before going out-of-scope.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%