CVE-2021-47412

block: don't call rq_qos_ops->done_bio if the bio isn't tracked

State
Published
Severity
7.8 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: don't call rq_qos_ops->done_bio if the bio isn't tracked

rq_qos framework is only applied on request based driver, so:

1) rq_qos_done_bio() needn't to be called for bio based driver

2) rq_qos_done_bio() needn't to be called for bio which isn't tracked, such as bios ended from error handling code.

Especially in bio_endio():

1) request queue is referred via bio->bi_bdev->bd_disk->queue, which may be gone since request queue refcount may not be held in above two cases

2) q->rq_qos may be freed in blk_cleanup_queue() when calling into __rq_qos_done_bio()

Fix the potential kernel panic by not calling rq_qos_ops->done_bio if the bio isn't tracked. This way is safe because both ioc_rqos_done_bio() and blkcg_iolatency_done_bio() are nop if the bio isn't tracked.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 67b42d0bf7a8fd1ec0cf1acdc9550e688d7c8578 to before db60edbfff332a6a5477c367af8125f034570989Affected
  • 67b42d0bf7a8fd1ec0cf1acdc9550e688d7c8578 to before 004b8f8a691205a93d9e80d98b786b2b97424d6eAffected
  • 67b42d0bf7a8fd1ec0cf1acdc9550e688d7c8578 to before a647a524a46736786c95cdb553a070322ca096e3Affected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.14.11 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.