CVE-2023-52629

sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

References

Notes

 carnil> Introduced in 9f5e8eee5cfe ("sh: generic push-switch framework."). Vulnerable
 carnil> versions: 2.6.20-rc1.

Bugs

Status

Branch Status
4.19-buster-security needed
4.19-upstream-stable needed
5.10-bullseye-security needed
5.10-upstream-stable needed
6.1-bookworm-security needed
6.1-upstream-stable needed
6.6-upstream-stable N/A "Fixed before branching point"
6.8-upstream-stable N/A "Fixed before branching point"
sid released (6.5.6-1)
upstream released (6.6-rc1) [246f80a0b17f8f582b2c0996db02998239057c65]