CVE-2022-48846

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/07/2024
Last modified:
24/07/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> block: release rq qos structures for queue without disk<br /> <br /> blkcg_init_queue() may add rq qos structures to request queue, previously<br /> blk_cleanup_queue() calls rq_qos_exit() to release them, but commit<br /> 8e141f9eb803 ("block: drain file system I/O on del_gendisk")<br /> moves rq_qos_exit() into del_gendisk(), so memory leak is caused<br /> because queues may not have disk, such as un-present scsi luns, nvme<br /> admin queue, ...<br /> <br /> Fixes the issue by adding rq_qos_exit() to blk_cleanup_queue() back.<br /> <br /> BTW, v5.18 won&amp;#39;t need this patch any more since we move<br /> blkcg_init_queue()/blkcg_exit_queue() into disk allocation/release<br /> handler, and patches have been in for-5.18/block.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15 (including) 5.15.31 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.16.17 (excluding)