CVE-2024-38384

blk-cgroup: fix list corruption from reorder of WRITE ->lqueued

State: Published
Severity: 7.8 High
Published: Jun 24, 2024
Updated: Aug 5, 2026
Reserved: Jun 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: fix list corruption from reorder of WRITE ->lqueued

__blkcg_rstat_flush() can be run anytime, especially when blk_cgroup_bio_start is being executed.

If WRITE of `->lqueued` is re-ordered with READ of 'bisc->lnode.next' in the loop of __blkcg_rstat_flush(), `next_bisc` can be assigned with one stat instance being added in blk_cgroup_bio_start(), then the local list in __blkcg_rstat_flush() could be corrupted.

Fix the issue by adding one barrier.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
LinuxLinux	3b8cc6298724021da845f2f9fd7dd4b6829a6817 to before 714e59b5456e4d6e4295a9968c564abe193f461cAffected 3b8cc6298724021da845f2f9fd7dd4b6829a6817 to before 785298ab6b802afa75089239266b6bbea590809cAffected 3b8cc6298724021da845f2f9fd7dd4b6829a6817 to before d0aac2363549e12cc79b8e285f13d5a9f42fd08eAffected
LinuxLinux	6.2Affected before 6.2Not affected 6.6.33 through 6.6.Not affected 6.9.4 through 6.9.Not affected 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.