PT-2024-8268 · Linux+6 · Linux Kernel+6
Christian Brauner
+2
·
Published
2023-12-12
·
Updated
2025-09-29
·
CVE-2023-52672
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a regression introduced by a commit that added general notification queue support, which caused resized pipes to lock up under certain conditions. This occurred because the commit resizing the pipe ring size was moved to a different function, resulting in the wakeup for
pipe->wr wait being triggered before actually raising pipe->max usage. If a pipe was full before the resize occurred, it would result in the wakeup never actually triggering pipe write. The vulnerability is associated with incorrect blocking in the pipe resize ring() and pipe set size() functions in fs/pipe.c. Exploitation of this vulnerability could allow an attacker to cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Resource Exhaustion
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu