Bug 2329161 (CVE-2024-53920)

Summary:	CVE-2024-53920 emacs: arbitrary code execution via Lisp macro expansion
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	jmigacz
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in Emacs. Viewing or editing an untrusted Emacs Lisp source code file can cause arbitrary code execution due to unsafe macro expansion when a user has configured elisp-completion-at-point for code completion or has enabled automatic error checking, such as Flymake or Flycheck.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2329248, 2329249, 2329250
Bug Blocks:

Description OSIDB Bzimport 2024-11-27 15:01:31 UTC

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Comment 2 Jacek Migacz 2025-02-25 14:41:09 UTC

There is an upstream fix addressing this CVE: https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=b5158bd191422e46273c4d9412f2bf097e2da2e0

Comment 3 errata-xmlrpc 2025-05-12 01:29:33 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:4787 https://access.redhat.com/errata/RHSA-2025:4787

Comment 4 errata-xmlrpc 2025-05-12 10:00:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:4794 https://access.redhat.com/errata/RHSA-2025:4794

Comment 5 errata-xmlrpc 2025-05-12 10:25:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:4793 https://access.redhat.com/errata/RHSA-2025:4793

Comment 6 errata-xmlrpc 2025-06-24 06:37:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:9448 https://access.redhat.com/errata/RHSA-2025:9448

Comment 7 errata-xmlrpc 2025-07-15 01:24:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:11030 https://access.redhat.com/errata/RHSA-2025:11030