PT-2024-11408 · Linux+6 · Linux Kernel+6
Yu Kuai
·
Published
2021-09-24
·
Updated
2026-03-14
·
CVE-2021-47412
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the block layer in the Linux kernel, where the
rq qos ops->done bio function is called even when the bio isn't tracked. This can lead to a potential kernel panic. The rq qos framework is only applied to request-based drivers, and rq qos done bio() doesn't need to be called for bio-based drivers or bios that aren't tracked. In bio endio(), the request queue is referred to via bio->bi bdev->bd disk->queue, which may be gone since the request queue refcount may not be held. Additionally, q->rq qos may be freed in blk cleanup queue() when calling into rq qos done bio(). The fix is to not call rq qos ops->done bio if the bio isn't tracked, which is safe because both ioc rqos done bio() and blkcg iolatency done bio() are no-ops if the bio isn't tracked.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linux Kernel
Red Hat
Rocky Linux
Suse