Riskcovery

CVE-2023-52787

blk-mq: make sure active queue usage is held for bio_integrity_prep()

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: make sure active queue usage is held for bio_integrity_prep()

blk_integrity_unregister() can come if queue usage counter isn't held for one bio with integrity prepared, so this request may be completed with calling profile->complete_fn, then kernel panic.

Another constraint is that bio_integrity_prep() needs to be called before bio merge.

Fix the issue by:

- call bio_integrity_prep() with one queue usage counter grabbed reliably

- call bio_integrity_prep() before bio merge

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 900e080752025f0016128f07c9ed4c50eba3654b to before b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9Affected
  • 900e080752025f0016128f07c9ed4c50eba3654b to before e9c309ded295b7f8849097d71ae231456ca79f78Affected
  • 900e080752025f0016128f07c9ed4c50eba3654b to before b80056bd75a16e4550873ecefe12bc8fd190b1cfAffected
  • 900e080752025f0016128f07c9ed4c50eba3654b to before b0077e269f6c152e807fdac90b58caf012cdbaabAffected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.72 through 6.1.*Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.