CVE-2023-52704 Information

Description

In the Linux kernel the following vulnerability has been resolved:

freezerumh: Fix call_usermode_helper_exec() vs SIGKILL

Tetsuo-San noted that commit f5d39b020809 (reezersched: Rewrite core freezer logic) broke call_usermodehelper_exec() for the KILLABLE case.

Specifically it was missed that the second unconditional wait_for_completion() was not optional and ensures the on-stack completion is unused before going out-of-scope.

Reference

https://git.kernel.org/stable/c/7f9f6c54da876b3f0bece2b569456ceb96965ed7 https://git.kernel.org/stable/c/eedeb787ebb53de5c5dcf7b7b39d01bf1b0f037d