CVE-2023-52787

blk-mq: make sure active queue usage is held for bio_integrity_prep()

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: make sure active queue usage is held for bio_integrity_prep()

blk_integrity_unregister() can come if queue usage counter isn't held

for one bio with integrity prepared, so this request may be completed with

calling profile->complete_fn, then kernel panic.

Another constraint is that bio_integrity_prep() needs to be called

before bio merge.

Fix the issue by:

- call bio_integrity_prep() with one queue usage counter grabbed reliably

- call bio_integrity_prep() before bio merge

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-05-21T15:31Z
EPSS history
Timeline
  • 21 MAY 15:31Z
    blk-mq: make sure active queue usage is held for bio_integrity_prep()
    cvelistv5