CVE-2024-35974

block: fix q->blkg_list corruption during disk rebind

Description

In the Linux kernel, the following vulnerability has been resolved: block: fix q->blkg_list corruption during disk rebind Multiple gendisk instances can allocated/added for single request queue in case of disk rebind. blkg may still stay in q->blkg_list when calling blkcg_init_disk() for rebind, then q->blkg_list becomes corrupted. Fix the list corruption issue by: - add blkg_init_queue() to initialize q->blkg_list & q->blkcg_mutex only - move calling blkg_init_queue() into blk_alloc_queue() The list corruption should be started since commit f1c006f1c685 ("blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()") which delays removing blkg from q->blkg_list into blkg_free_workfn().

N/A

CVSS

Severity:

EPSS 0.08%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/740ffad95ca8033bd6e080ed337655b13b4d38ac
https://git.kernel.org/stable/c/858c489d81d659af17a4d11cfaad2afb42e47a76
https://git.kernel.org/stable/c/8b8ace080319a866f5dfe9da8e665ae51d971c54

Frequently Asked Questions

What is the severity of CVE-2024-35974?: CVE-2024-35974 has not yet been assigned a CVSS score.
How to fix CVE-2024-35974?: To fix CVE-2024-35974, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-35974 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-35974 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-35974?: CVE-2024-35974 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.