In the Linux kernel, the following vulnerability has been resolved:
block: fix q->blkg_list corruption during disk rebind
Multiple gendisk instances can allocated/added for single request queue in case of disk rebind. blkg may still stay in q->blkg_list when calling blkcg_init_disk() for rebind, then q->blkg_list becomes corrupted.
Fix the list corruption issue by:
- add blkg_init_queue() to initialize q->blkg_list & q->blkcg_mutex only - move calling blkg_init_queue() into blk_alloc_queue()
The list corruption should be started since commit f1c006f1c685 ("blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()") which delays removing blkg from q->blkg_list into blkg_free_workfn().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-devel-azure | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azureUpgrade linux-image-aws | Jul 12, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub