In the Linux kernel, the following vulnerability has been resolved:
block: fix q->blkg_list corruption during disk rebind
Multiple gendisk instances can allocated/added for single request queue in case of disk rebind. blkg may still stay in q->blkg_list when calling blkcg_init_disk() for rebind, then q->blkg_list becomes corrupted.
Fix the list corruption issue by:
- add blkg_init_queue() to initialize q->blkg_list & q->blkcg_mutex only - move calling blkg_init_queue() into blk_alloc_queue()
The list corruption should be started since commit f1c006f1c685 ("blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()") which delays removing blkg from q->blkg_list into blkg_free_workfn().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-develUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdso | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04a | Jul 12, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub