CVE-2023-52774

s390/dasd: protect device queue against concurrent access

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: protect device queue against concurrent access

In dasd_profile_start() the amount of requests on the device queue are

counted. The access to the device queue is unprotected against

concurrent access. With a lot of parallel I/O, especially with alias

devices enabled, the device queue can change while dasd_profile_start()

is accessing the queue. In the worst case this leads to a kernel panic

due to incorrect pointer accesses.

Fix this by taking the device lock before accessing the queue and

counting the requests. Additionally the check for a valid profile data

pointer can be done earlier to avoid unnecessary locking in a hot path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.2th percentile
Published
2024-05-21T15:30Z
EPSS history
Timeline
  • 21 MAY 15:30Z
    s390/dasd: protect device queue against concurrent access
    cvelistv5