CVE-2022-48846
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/07/2024
Last modified:
24/07/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
block: release rq qos structures for queue without disk<br />
<br />
blkcg_init_queue() may add rq qos structures to request queue, previously<br />
blk_cleanup_queue() calls rq_qos_exit() to release them, but commit<br />
8e141f9eb803 ("block: drain file system I/O on del_gendisk")<br />
moves rq_qos_exit() into del_gendisk(), so memory leak is caused<br />
because queues may not have disk, such as un-present scsi luns, nvme<br />
admin queue, ...<br />
<br />
Fixes the issue by adding rq_qos_exit() to blk_cleanup_queue() back.<br />
<br />
BTW, v5.18 won&#39;t need this patch any more since we move<br />
blkcg_init_queue()/blkcg_exit_queue() into disk allocation/release<br />
handler, and patches have been in for-5.18/block.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.15 (including) | 5.15.31 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.16.17 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



