CVE-2024-38384

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-38384
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38384.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38384
Downstream
Related
Published
2024-06-24T13:50:51.033Z
Modified
2026-03-23T05:05:44.917444496Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
Details

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: fix list corruption from reorder of WRITE ->lqueued

_blkcgrstatflush() can be run anytime, especially when blkcgroupbiostart is being executed.

If WRITE of ->lqueued is re-ordered with READ of 'bisc->lnode.next' in the loop of __blkcgrstatflush(), next_bisc can be assigned with one stat instance being added in blk_cgroupbiostart(), then the local list in __blkcgrstatflush() could be corrupted.

Fix the issue by adding one barrier.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38384.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3b8cc6298724021da845f2f9fd7dd4b6829a6817
Fixed
714e59b5456e4d6e4295a9968c564abe193f461c
Fixed
785298ab6b802afa75089239266b6bbea590809c
Fixed
d0aac2363549e12cc79b8e285f13d5a9f42fd08e

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38384.json"