Vulnerability CVE-2023-52704


Published: 2024-05-21

Description:
In the Linux kernel, the following vulnerability has been resolved:

freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL

Tetsuo-San noted that commit f5d39b020809 ("freezer,sched: Rewrite
core freezer logic") broke call_usermodehelper_exec() for the KILLABLE
case.

Specifically it was missed that the second, unconditional,
wait_for_completion() was not optional and ensures the on-stack
completion is unused before going out-of-scope.

 References:
https://git.kernel.org/stable/c/7f9f6c54da876b3f0bece2b569456ceb96965ed7
https://git.kernel.org/stable/c/eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037d

Copyright 2026, cxsecurity.com

 

Back to Top