Log in Start free

Vulnerability · Published May 17, 2024 · Assigned by Linux

CVE-2023-52672pipe: wakeup wr_wait after setting max_usage

High 7.0

In plain English

A high-severity uncontrolled resource consumption in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.3%top 82.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wr_wait after setting max_usage Commit c73be61cede5 ("pipe: Add general notification queue support") a regression was introduced that would lock up resized pipes under certain conditions. See the reproducer in [1]. The commit resizing the pipe ring size was moved to a different function, doing that moved the wakeup for pipe->wr_wait before actually raising pipe->max_usage. If a pipe was full before the resize occured it would result in the wakeup never actually triggering pipe_write. Set @max_usage and @nr_accounted before waking writers if this isn't a watch queue. [Christian Brauner <brauner@kernel.org>: rewrite to account for watch queues]

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.76-1DEBIAN-CVE-2023-52672
Debian:13linux6.6.15-1DEBIAN-CVE-2023-52672
Debian:14linux6.6.15-1DEBIAN-CVE-2023-52672
Ubuntu:22.04:LTSlinux5.15.0-106.116UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1022.23~22.04.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1022.24~22.04.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-41.41~22.04.2UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-41.41.1~22.04.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1021.22UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1024.25UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1024.24~22.04.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-riscv-6.56.5.0-40.40.1~22.04.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1015.16~22.04.1UBUNTU-CVE-2023-52672
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2023-52672

Affected products (as reported)

VendorProductVersions
Linux Linux c73be61cede5882f9605a852414db559c0ebedfd – before 162ae0e78bdabf84ef10c1293c4ed7865cb7d3c8c73be61cede5882f9605a852414db559c0ebedfd – before 3efbd114b91525bb095b8ae046382197d92126b9c73be61cede5882f9605a852414db559c0ebedfd – before b87a1229d8668fbc78ebd9ca0fc797a76001c60fc73be61cede5882f9605a852414db559c0ebedfd – before 68e51bdb1194f11d3452525b99c98aff6f837b24c73be61cede5882f9605a852414db559c0ebedfd – before 6fb70694f8d1ac34e45246b0ac988f025e1e5b55c73be61cede5882f9605a852414db559c0ebedfd – before e95aada4cb93d42e25c30a0ef9eb2923d9711d4a
Linux Linux 5.8

Weakness: CWE-400 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References