CVE-2024-56764: ublk: detach gendisk from ublk device if add_disk() fails
In the Linux kernel, the following vulnerability has been resolved:
ublk: detach gendisk from ublk device if adddisk() fails
Inside ublkabortrequests(), gendisk is grabbed for aborting all inflight requests. And ublkabortrequests() is called when exiting the uring context or handling timeout.
If adddisk() fails, the gendisk may have been freed when calling ublkabortrequests(), so use-after-free can be caused when getting disk's reference in ublkabortrequests().
Fixes the bug by detaching gendisk from ublk device if adddisk() fails.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56764?
CVE-2024-56764 has been categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-56764?
To resolve CVE-2024-56764, upgrade to the latest version of the Linux kernel that has the vulnerability patched.
What versions of Linux kernel are affected by CVE-2024-56764?
CVE-2024-56764 affects Linux kernel versions between 6.7 and 6.12.8, as well as specific release candidates 6.13-rc1 to 6.13-rc4.
What components are involved in CVE-2024-56764?
CVE-2024-56764 involves the ublk subsystem and the gendisk structure within the Linux kernel.
Is CVE-2024-56764 being actively exploited?
As of now, there is no public information indicating that CVE-2024-56764 is actively being exploited in the wild.