CVE-2023-52609 — Race Condition in Linux
Severity
4.7MEDIUMNVD
OSV8.1OSV7.5OSV6.5
EPSS
0.0%
top 98.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Latest updateJun 26
Description
In the Linux kernel, the following vulnerability has been resolved:
binder: fix race between mmput() and do_exit()
Task A calls binder_update_page_range() to allocate and insert pages on
a remote address space from Task B. For this, Task A pins the remote mm
via mmget_not_zero() first. This can race with Task B do_exit() and the
final mmput() refcount decrement will come from Task A.
Task A | Task B
------------------+------------------
mmget_not_zero() |
| do_exit()
| exit_mm()
| mmput()
mmp…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linux457b9a6f09f011ebcb9b52cc203a6331a6fc2de7 — 95b1d336b0642198b56836b89908d07b9a0c9608+8
Also affects: Debian Linux 10.0