CVEvulnerability
CVE-2023-52787
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-21
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: make sure active queue usage is held for bio_integrity_prep()
blk_integrity_unregister() can come if queue usage counter isn't held
for one bio with integrity prepared, so this request may be completed with
calling profile->complete_fn, then kernel panic.
Another constraint is that bio_integrity_prep() needs to be called
before bio merge.
Fix the issue by:
- call bio_integrity_prep() with one queue usage counter grabbed reliably
- call bio_integrity_prep() before bio merge
Affected configurations
• linux linux kernel (>= 5.16 < 6.1.72)
• linux linux kernel (>= 6.2 < 6.5.13)
• linux linux kernel (>= 6.6 < 6.6.3)
• linux linux kernel 6.7
References
- https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab Patch
- https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 Patch
- https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf Patch
- https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 Patch
- https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab Patch
- https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 Patch
- https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf Patch
- https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 Patch