CVE-2022-49694
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49694
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49694.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49694
- Downstream
- Related
- Published
- 2025-02-26T02:24:16Z
- Modified
- 2025-10-21T11:06:07.829151Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- block: disable the elevator int del_gendisk
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
block: disable the elevator int del_gendisk
The elevator is only used for file system requests, which are stopped in delgendisk. Move disabling the elevator and freeing the scheduler tags to the end of delgendisk instead of doing that work in diskrelease and blkcleanupqueue to avoid a use after free on q->tagset from diskrelease as the tagset might not be alive at that point.
Move the blkqosexit call as well, as it just depends on the elevator exit and would be the only reason to keep the not exactly cheap queue freeze in disk_release.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede155b0c238b20f0a866f4334d292656665836c8aFixedf28699fafc047ec33299da01e928c3a0073c5cc6
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede155b0c238b20f0a866f4334d292656665836c8aFixed50e34d78815e474d410f342fbe783b18192ca518
Affected versions
v5.*
v5.15
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.19-rc1
v5.19-rc2