CVE-2024-53184

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> um: ubd: Do not use drvdata in release<br /> <br /> The drvdata is not available in release. Let&amp;#39;s just use container_of()<br /> to get the ubd instance. Otherwise, removing a ubd device will result<br /> in a crash:<br /> <br /> RIP: 0033:blk_mq_free_tag_set+0x1f/0xba<br /> RSP: 00000000e2083bf0 EFLAGS: 00010246<br /> RAX: 000000006021463a RBX: 0000000000000348 RCX: 0000000062604d00<br /> RDX: 0000000004208060 RSI: 00000000605241a0 RDI: 0000000000000348<br /> RBP: 00000000e2083c10 R08: 0000000062414010 R09: 00000000601603f7<br /> R10: 000000000000133a R11: 000000006038c4bd R12: 0000000000000000<br /> R13: 0000000060213a5c R14: 0000000062405d20 R15: 00000000604f7aa0<br /> Kernel panic - not syncing: Segfault with no mm<br /> CPU: 0 PID: 17 Comm: kworker/0:1 Not tainted 6.8.0-rc3-00107-gba3f67c11638 #1<br /> Workqueue: events mc_work_proc<br /> Stack:<br /> 00000000 604f7ef0 62c5d000 62405d20<br /> e2083c30 6002c776 6002c755 600e47ff<br /> e2083c60 6025ffe3 04208060 603d36e0<br /> Call Trace:<br /> [] ubd_device_release+0x21/0x55<br /> [] ? ubd_device_release+0x0/0x55<br /> [] ? kfree+0x0/0x100<br /> [] device_release+0x70/0xba<br /> [] kobject_put+0xb5/0xe2<br /> [] put_device+0x19/0x1c<br /> [] platform_device_put+0x26/0x29<br /> [] platform_device_unregister+0x2c/0x2e<br /> [] ubd_remove+0xb8/0xd6<br /> [] ? mconsole_reply+0x0/0x50<br /> [] mconsole_remove+0x160/0x1cc<br /> [] ? mconsole_reply+0x48/0x50<br /> [] ? um_set_signals+0x3b/0x43<br /> [] ? update_min_vruntime+0x14/0x70<br /> [] ? dequeue_task_fair+0x164/0x235<br /> [] ? update_cfs_group+0x0/0x40<br /> [] ? __schedule+0x0/0x3ed<br /> [] ? um_set_signals+0x0/0x43<br /> [] mc_work_proc+0x77/0x91<br /> [] process_scheduled_works+0x1af/0x2c3<br /> [] ? assign_work+0x0/0x58<br /> [] worker_thread+0x2f7/0x37a<br /> [] ? set_pf_worker+0x0/0x64<br /> [] ? arch_local_irq_save+0x0/0x2d<br /> [] ? kthread_exit+0x0/0x3a<br /> [] ? worker_thread+0x0/0x37a<br /> [] kthread+0x130/0x135<br /> [] new_thread_handler+0x85/0xb6