CVE-2024-50081: blk-mq: setup queue ->tag_set before initializing hctx
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: setup queue ->tagset before initializing hctx
Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp handler.
However, q->tagset may not be setup yet when the cpuhp handler is enabled, then kernel oops is triggered.
Fix the issue by setup queue tagset before initializing hctx.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: setup queue ->tagset before initializing hctx
Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp handler.
However, q->tagset may not be setup yet when the cpuhp handler is enabled, then kernel oops is triggered.
Fix the issue by setup queue tagset before initializing hctx.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50081?
CVE-2024-50081 is considered a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50081?
To fix CVE-2024-50081, update your Linux kernel to version 6.11.6 or later.
What versions of the Linux kernel are affected by CVE-2024-50081?
CVE-2024-50081 affects Linux kernel versions from 6.10 to 6.11.5 and 6.12-rc1 to 6.12-rc3.
What type of vulnerability is CVE-2024-50081?
CVE-2024-50081 is a vulnerability related to block multi-queue management in the Linux kernel.
Is there a patch available for CVE-2024-50081?
Yes, patches for CVE-2024-50081 are available in the latest kernel updates.