PT-2023-9715 · Linux+3 · Linux Kernel+3
John Stultz
·
Publicado
2023-09-22
·
Atualizado
2025-09-23
·
CVE-2023-52836
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a lifetime problem in the Linux kernel's locking/ww mutex/test component, where the controlling thread that spawns work allocates "struct stress" structures passed to workqueue threads. When these threads finish, they free the stress struct, which contains the workqueue work struct node. This can lead to the work struct being freed before the work thread returns and while flush workqueue is waiting, causing crashes as mutexes are freed while being used.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Improper Locking
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Os
Suse