← CVE Intelligence

CVE-2023-52704

freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL Tetsuo-San noted that commit f5d39b020809 ("freezer,sched: Rewrite core freezer logic") broke call_usermodehelper_exec() for the KILLABLE case. Specifically it was missed that the second, unconditional, wait_for_completion() was not optional and ensures the on-stack completion is unused before going out-of-scope.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected f5d39b020809146cc28e6e73369bf8065e0310aa before 7f9f6c54da876b3f0bece2b569456ceb96965ed7; affected f5d39b020809146cc28e6e73369bf8065e0310aa before eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037d
Linux / Linuxaffected 6.1; unaffected 0 before 6.1; unaffected 6.1.13 through 6.1.*; unaffected 6.2 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.