CVE-2023-52672

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a regression introduced by a commit that added general notification queue support, which caused resized pipes to lock up under certain conditions. This occurred because the commit resizing the pipe ring size was moved to a different function, resulting in the wakeup for pipe->wr wait being triggered before actually raising pipe->max usage. If a pipe was full before the resize occurred, it would result in the wakeup never actually triggering pipe write. The vulnerability is associated with incorrect blocking in the pipe resize ring() and pipe set size() functions in fs/pipe.c. Exploitation of this vulnerability could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.