linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_...
CVE-2023-52942 is fixed in 20 products on 1 platform, first by ALAS2023-2023-132, released March 11, 2023. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() It was found that the check to see if a partition could use up all the cpus from the parent cpuset in update_parent_subparts_cpumask() was incorrect. As a result, it is possible to leave parent with no effective cpu left even if there are tasks in the parent cpuset. This can lead to system panic as reported in [1]. Fix this probem by updating the check to fail the enabling the partition if parent's effective_cpus is a subset of the child's cpus_allowed. Also record the error code when an error happens in update_prstate() and add a test case where parent partition and child have the same cpu list and parent has task. Enabling partition in the child will fail in this case. [1] https://www.spinics.net/lists/cgroups/msg36254.html
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| bpftool-debuginfo · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-debuginfo · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-debuginfo-common-aarch64 · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-debuginfo-common-x86_64 · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-devel · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-headers · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-libbpf · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-libbpf-devel · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-libbpf-static · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-livepatch-6.1.12-17.42 · amzn 2023 | 1.0-0.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-tools · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-tools-debuginfo · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| kernel-tools-devel · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| linux · Debian 12.15 (bookworm) | 6.1.11-1 | DEBIAN-CVE-2023-52942 | Mar 27, 2025 |
| linux · Debian 13.5 (trixie) | 6.1.11-1 | DEBIAN-CVE-2023-52942 | Mar 27, 2025 |
| linux · Debian 14 | 6.1.11-1 | DEBIAN-CVE-2023-52942 | Mar 27, 2025 |
| perf · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| perf-debuginfo · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| python3-perf · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
| python3-perf-debuginfo · amzn 2023 | 6.1.12-17.42.amzn2023 | ALAS2023-2023-132 | Mar 11, 2023 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.