In the Linux kernel, the following vulnerability has been resolved:
ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
When two UBLK_CMD_START_USER_RECOVERY commands are submitted, the first one sets 'ubq->ubq_daemon' to NULL, and the second one triggers WARN in ublk_queue_reinit() and subsequently a NULL pointer dereference issue.
Fix it by adding the check in ublk_ctrl_start_recovery() and return immediately in case of zero 'ub->nr_queues_ready'.
BUG: kernel NULL pointer dereference, address: 0000000000000028 RIP: 0010:ublk_ctrl_start_recovery.constprop.0+0x82/0x180 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x75/0x170 ? exc_page_fault+0x64/0x140 ? asm_exc_page_fault+0x22/0x30 ? ublk_ctrl_start_recovery.constprop.0+0x82/0x180 ublk_ctrl_uring_cmd+0x4f7/0x6c0 ? pick_next_task_idle+0x26/0x40 io_uring_cmd+0x9a/0x1b0 io_issue_sqe+0x193/0x3f0 io_wq_submit_work+0x9b/0x390 io_worker_handle_work+0x165/0x360 io_wq_worker+0xcb/0x2f0 ? finish_task_switch.isra.0+0x203/0x290 ? finish_task_switch.isra.0+0x203/0x290 ? __pfx_io_wq_worker+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_io_wq_worker+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-freescale | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-azure-fde | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub