In the Linux kernel, the following vulnerability has been resolved:
ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
When two UBLK_CMD_START_USER_RECOVERY commands are submitted, the first one sets 'ubq->ubq_daemon' to NULL, and the second one triggers WARN in ublk_queue_reinit() and subsequently a NULL pointer dereference issue.
Fix it by adding the check in ublk_ctrl_start_recovery() and return immediately in case of zero 'ub->nr_queues_ready'.
BUG: kernel NULL pointer dereference, address: 0000000000000028 RIP: 0010:ublk_ctrl_start_recovery.constprop.0+0x82/0x180 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x75/0x170 ? exc_page_fault+0x64/0x140 ? asm_exc_page_fault+0x22/0x30 ? ublk_ctrl_start_recovery.constprop.0+0x82/0x180 ublk_ctrl_uring_cmd+0x4f7/0x6c0 ? pick_next_task_idle+0x26/0x40 io_uring_cmd+0x9a/0x1b0 io_issue_sqe+0x193/0x3f0 io_wq_submit_work+0x9b/0x390 io_worker_handle_work+0x165/0x360 io_wq_worker+0xcb/0x2f0 ? finish_task_switch.isra.0+0x203/0x290 ? finish_task_switch.isra.0+0x203/0x290 ? __pfx_io_wq_worker+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_io_wq_worker+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rt | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-oracle | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub