In the Linux kernel, the following vulnerability has been resolved:
ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
When two UBLK_CMD_START_USER_RECOVERY commands are submitted, the first one sets 'ubq->ubq_daemon' to NULL, and the second one triggers WARN in ublk_queue_reinit() and subsequently a NULL pointer dereference issue.
Fix it by adding the check in ublk_ctrl_start_recovery() and return immediately in case of zero 'ub->nr_queues_ready'.
BUG: kernel NULL pointer dereference, address: 0000000000000028 RIP: 0010:ublk_ctrl_start_recovery.constprop.0+0x82/0x180 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x75/0x170 ? exc_page_fault+0x64/0x140 ? asm_exc_page_fault+0x22/0x30 ? ublk_ctrl_start_recovery.constprop.0+0x82/0x180 ublk_ctrl_uring_cmd+0x4f7/0x6c0 ? pick_next_task_idle+0x26/0x40 io_uring_cmd+0x9a/0x1b0 io_issue_sqe+0x193/0x3f0 io_wq_submit_work+0x9b/0x390 io_worker_handle_work+0x165/0x360 io_wq_worker+0xcb/0x2f0 ? finish_task_switch.isra.0+0x203/0x290 ? finish_task_switch.isra.0+0x203/0x290 ? __pfx_io_wq_worker+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_io_wq_worker+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-socionext | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-raspi | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub