CVE-2023-52942

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() It was found that the check to see if a partition could use up all the cpus from the parent cpuset in update_parent_subparts_cpumask() was incorrect. As a result, it is possible to leave parent with no effective cpu left even if there are tasks in the parent cpuset. This can lead to system panic as reported in [1]. Fix this probem by updating the check to fail the enabling the partition if parent's effective_cpus is a subset of the child's cpus_allowed. Also record the error code when an error happens in update_prstate() and add a test case where parent partition and child have the same cpu list and parent has task. Enabling partition in the child will fail in this case. [1] https://www.spinics.net/lists/cgroups/msg36254.html

• https://git.kernel.org/stable/c/a2ab7f2cf5ef8f0c6212a246e681d1fe358cec1fPatch
• https://git.kernel.org/stable/c/e5ae8803847b80fe9d744a3174abe2b7bfed222aPatch

Published

Mar 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52937In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52938In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52939In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-5294A vulnerability has been found in ECshop 4.1.1 and classifie…8.8
• CVE-2023-52940In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52941In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52943Incorrect authorization vulnerability in Alert.Setting webap…4.3
• CVE-2023-52944Incorrect authorization vulnerability in ActionRule webapi c…4.3
• CVE-2023-52945Uncontrolled search path element vulnerability in OpenSSL DL…7.8
• CVE-2023-52946Buffer copy without checking size of input ('Classic Buffer …8.2
• CVE-2023-52947Missing authentication for critical function vulnerability i…3.3
• CVE-2023-52948Missing encryption of sensitive data vulnerability in settin…5