PT-2023-9715 · Linux+3 · Linux Kernel+3
John Stultz
·
Published
2023-09-22
·
Updated
2025-09-23
·
CVE-2023-52836
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a lifetime problem in the Linux kernel's locking/ww mutex/test component, where the controlling thread that spawns work allocates "struct stress" structures passed to workqueue threads. When these threads finish, they free the stress struct, which contains the workqueue work struct node. This can lead to the work struct being freed before the work thread returns and while flush workqueue is waiting, causing crashes as mutexes are freed while being used.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse