CVE-2023-52942

linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_...

CVE-2023-52942 is fixed in 20 products on 1 platform, first by ALAS2023-2023-132, released March 11, 2023. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0023
13th percentile

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() It was found that the check to see if a partition could use up all the cpus from the parent cpuset in update_parent_subparts_cpumask() was incorrect. As a result, it is possible to leave parent with no effective cpu left even if there are tasks in the parent cpuset. This can lead to system panic as reported in [1]. Fix this probem by updating the check to fail the enabling the partition if parent's effective_cpus is a subset of the child's cpus_allowed. Also record the error code when an error happens in update_prstate() and add a test case where parent partition and child have the same cpu list and parent has task. Enabling partition in the child will fail in this case. [1] https://www.spinics.net/lists/cgroups/msg36254.html

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
bpftool-debuginfo · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-debuginfo · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-debuginfo-common-aarch64 · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-debuginfo-common-x86_64 · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-devel · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-headers · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-libbpf · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-libbpf-devel · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-libbpf-static · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-livepatch-6.1.12-17.42 · amzn 2023 1.0-0.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-tools · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-tools-debuginfo · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
kernel-tools-devel · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
linux · Debian 12.15 (bookworm) 6.1.11-1 DEBIAN-CVE-2023-52942 Mar 27, 2025
linux · Debian 13.5 (trixie) 6.1.11-1 DEBIAN-CVE-2023-52942 Mar 27, 2025
linux · Debian 14 6.1.11-1 DEBIAN-CVE-2023-52942 Mar 27, 2025
perf · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
perf-debuginfo · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
python3-perf · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023
python3-perf-debuginfo · amzn 2023 6.1.12-17.42.amzn2023 ALAS2023-2023-132 Mar 11, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.