In the Linux kernel, the following vulnerability has been resolved:
block: fix q->blkg_list corruption during disk rebind
Multiple gendisk instances can allocated/added for single request queue in case of disk rebind. blkg may still stay in q->blkg_list when calling blkcg_init_disk() for rebind, then q->blkg_list becomes corrupted.
Fix the list corruption issue by:
- add blkg_init_queue() to initialize q->blkg_list & q->blkcg_mutex only - move calling blkg_init_queue() into blk_alloc_queue()
The list corruption should be started since commit f1c006f1c685 ("blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()") which delays removing blkg from q->blkg_list into blkg_free_workfn().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-docsUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmall | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04 | Jul 12, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub