In the Linux kernel, the following vulnerability has been resolved:
blk-mq: setup queue ->tag_set before initializing hctx
Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp handler.
However, q->tag_set may not be setup yet when the cpuhp handler is enabled, then kernel oops is triggered.
Fix the issue by setup queue tag_set before initializing hctx.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 29, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-oem | Feb 20, 2025 | Oct 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub