Riskcovery

CVE-2024-38663

blk-cgroup: fix list corruption from resetting io stat

State
Published
Severity
7.8 High
Published
Jun 24, 2024
Updated
Aug 5, 2026
Reserved
Jun 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: fix list corruption from resetting io stat

Since commit 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()"), each iostat instance is added to blkcg percpu list, so blkcg_reset_stats() can't reset the stat instance by memset(), otherwise the llist may be corrupted.

Fix the issue by only resetting the counter part.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3b8cc6298724021da845f2f9fd7dd4b6829a6817 to before d4a60298ac34f027a09f8f893fdbd9e06279bb24Affected
  • 3b8cc6298724021da845f2f9fd7dd4b6829a6817 to before 89bb36c72e1951843f9e04dc84412e31fcc849a9Affected
  • 3b8cc6298724021da845f2f9fd7dd4b6829a6817 to before 6da6680632792709cecf2b006f2fe3ca7857e791Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.9.4 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.