Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52704
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2023-52704

2024-05-2100:00:00
ubuntu.com
ubuntu.com
3
linux kernel
vulnerability
cve-2023-52704
resolved
freezer
umh
call_usermode_helper_exec
sigkill
tetsuo-san
commit
killable
wait_for_completion
unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved:
freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted
that commit f5d39b020809 (“freezer,sched: Rewrite core freezer logic”)
broke call_usermodehelper_exec() for the KILLABLE case. Specifically it was
missed that the second, unconditional, wait_for_completion() was not
optional and ensures the on-stack completion is unused before going
out-of-scope.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%