PT-2024-26814 · Linux+5 · Linux Kernel+5
Ming Lei
·
Published
2024-04-07
·
Updated
2026-03-13
·
CVE-2024-35974
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the corruption of the
q->blkg list during disk rebind in the Linux kernel. When multiple gendisk instances are allocated or added for a single request queue in case of disk rebind, blkg may still stay in q->blkg list when calling blkcg init disk() for rebind, resulting in corruption of q->blkg list. The corruption is caused by a commit that delays removing blkg from q->blkg list into blkg free workfn(). The fix involves initializing q->blkg list and q->blkcg mutex using blkg init queue() and moving the call to blkg init queue() into blk alloc queue().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu