PT-2024-21449 · Linux+10 · Linux Kernel+10

Changhui Zhong

·

Published

2024-01-12

·

Updated

2025-10-03

·

CVE-2024-26671

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a blk-mq fix for an IO hang from sbitmap wakeup race. In blk mq mark tag wait(), add wait queue() may be re-ordered with the following blk mq get driver tag() in case of getting driver tag failure. Then in sbitmap queue wake up(), waitqueue active() may not observe the added waiter in blk mq mark tag wait() and wake up nothing, meantime blk mq mark tag wait() can't get driver tag successfully. This issue can be reproduced by running a specific test in loop, and fio hang can be observed in < 30min when running it on a test VM in a laptop.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:2394
ALSA-2024:2950
ALSA-2024:3138
ALSA-2024_2394
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
AZL-58798
BDU:2026-03343
CESA-2024_2950
CESA-2024_3138
CVE-2024-26671
DLA-3840-1
DLA-3842-1
DSA-5658-1
DSA-5681-1
INFSA-2024_2394
INFSA-2024_2950
INFSA-2024_3138
OESA-2024-1617
OESA-2024-1618
OESA-2024-1619
OESA-2024-1620
OESA-2024-1621
OESA-2024-1622
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
RHSA-2024:10262
RHSA-2024:2394
RHSA-2024:2950
RHSA-2024:3138
RHSA-2024:8613
RHSA-2024:8614
RHSA-2024:9942
RHSA-2024:9943
RHSA-2024_2394
RHSA-2024_2950
RHSA-2024_3138
RLSA-2024:2950
RLSA-2024:3138
SUSE-SU-2024:1643-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1646-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
SUSE-SU-2024:1870-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6765-1
USN-6766-1
USN-6766-2
USN-6766-3
USN-6767-1
USN-6767-2
USN-6795-1
USN-6818-1
USN-6818-2
USN-6818-3
USN-6818-4
USN-6819-1
USN-6819-2
USN-6819-3
USN-6819-4
USN-6828-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu