In the Linux kernel, the following vulnerability has been resolved:
blk-mq: setup queue ->tag_set before initializing hctx
Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp handler.
However, q->tag_set may not be setup yet when the cpuhp handler is enabled, then kernel oops is triggered.
Fix the issue by setup queue tag_set before initializing hctx.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 29, 2024 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-24.04a | Feb 20, 2025 | Oct 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub