In the Linux kernel, the following vulnerability has been resolved:
block: fix q->blkg_list corruption during disk rebind
Multiple gendisk instances can allocated/added for single request queue in case of disk rebind. blkg may still stay in q->blkg_list when calling blkcg_init_disk() for rebind, then q->blkg_list becomes corrupted.
Fix the list corruption issue by:
- add blkg_init_queue() to initialize q->blkg_list & q->blkcg_mutex only - move calling blkg_init_queue() into blk_alloc_queue()
The list corruption should be started since commit f1c006f1c685 ("blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()") which delays removing blkg from q->blkg_list into blkg_free_workfn().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dtb-armUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-xilinx | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-38-generic | Jul 12, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub