Description
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: make sure active queue usage is held for bio_integrity_prep()
blk_integrity_unregister() can come if queue usage counter isn't held for one bio with integrity prepared, so this request may be completed with calling profile->complete_fn, then kernel panic.
Another constraint is that bio_integrity_prep() needs to be called before bio merge.
Fix the issue by:
- call bio_integrity_prep() with one queue usage counter grabbed reliably
- call bio_integrity_prep() before bio merge
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 900e080752025f0016128f07c9ed4c50eba3654b, < b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9; >= 900e080752025f0016128f07c9ed4c50eba3654b, < e9c309ded295b7f8849097d71ae231456ca79f78; >= 900e080752025f0016128f07c9ed4c50eba3654b, < b80056bd75a16e4550873ecefe12bc8fd190b1cf; >= 900e080752025f0016128f07c9ed4c50eba3654b, < b0077e269f6c152e807fdac90b58caf012cdbaab |
| Linux | Linux | 5.16 |
References
- https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaabPatch
- https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9Patch
- https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cfPatch
- https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78Patch
- https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaabPatch
- https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9Patch
- https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cfPatch
- https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78Patch
Timeline
- Published
- May 21, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed