CVE-2024-50081

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-50081
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50081.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-50081
Downstream
Related
Published
2024-10-29T00:50:23.608Z
Modified
2025-11-20T06:15:48.394635Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
blk-mq: setup queue ->tag_set before initializing hctx
Details

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: setup queue ->tag_set before initializing hctx

Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp handler.

However, q->tag_set may not be setup yet when the cpuhp handler is enabled, then kernel oops is triggered.

Fix the issue by setup queue tag_set before initializing hctx.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7b815817aa58d2e2101feb2fcf64c60cae0b2695
Fixed
d28b256db525d9432bc3eb2c8d83f7d3f5e1cc87
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7b815817aa58d2e2101feb2fcf64c60cae0b2695
Fixed
c25c0c9035bb8b28c844dfddeda7b8bdbcfcae95

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.12-rc1

Database specific

vanir_signatures

[
    {
        "id": "CVE-2024-50081-36aca42f",
        "signature_version": "v1",
        "digest": {
            "length": 968.0,
            "function_hash": "319738523143345548788558283396884591720"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d28b256db525d9432bc3eb2c8d83f7d3f5e1cc87",
        "target": {
            "file": "block/blk-mq.c",
            "function": "blk_mq_init_allocated_queue"
        }
    },
    {
        "id": "CVE-2024-50081-3ca7c1ae",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "153744501293659327014617594514192565856",
                "278014547545789457638695617945350957078",
                "4950540443379211462446883397040755606",
                "107351729173510130769116311820837389032",
                "91501648185702215607019393309815963145",
                "338182466727032011823973421907386550463",
                "119431072651088194710885999764879748168"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d28b256db525d9432bc3eb2c8d83f7d3f5e1cc87",
        "target": {
            "file": "block/blk-mq.c"
        }
    },
    {
        "id": "CVE-2024-50081-c53f5c06",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "153744501293659327014617594514192565856",
                "278014547545789457638695617945350957078",
                "4950540443379211462446883397040755606",
                "107351729173510130769116311820837389032",
                "91501648185702215607019393309815963145",
                "338182466727032011823973421907386550463",
                "119431072651088194710885999764879748168"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c25c0c9035bb8b28c844dfddeda7b8bdbcfcae95",
        "target": {
            "file": "block/blk-mq.c"
        }
    },
    {
        "id": "CVE-2024-50081-d1b316a8",
        "signature_version": "v1",
        "digest": {
            "length": 968.0,
            "function_hash": "319738523143345548788558283396884591720"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c25c0c9035bb8b28c844dfddeda7b8bdbcfcae95",
        "target": {
            "file": "block/blk-mq.c",
            "function": "blk_mq_init_allocated_queue"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.11.5