In the Linux kernel, the following vulnerability has been resolved:
blk-mq: setup queue ->tag_set before initializing hctx
Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp handler.
However, q->tag_set may not be setup yet when the cpuhp handler is enabled, then kernel oops is triggered.
Fix the issue by setup queue tag_set before initializing hctx.
[
{
"id": "CVE-2024-50081-36aca42f",
"signature_version": "v1",
"digest": {
"length": 968.0,
"function_hash": "319738523143345548788558283396884591720"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d28b256db525d9432bc3eb2c8d83f7d3f5e1cc87",
"target": {
"file": "block/blk-mq.c",
"function": "blk_mq_init_allocated_queue"
}
},
{
"id": "CVE-2024-50081-3ca7c1ae",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"153744501293659327014617594514192565856",
"278014547545789457638695617945350957078",
"4950540443379211462446883397040755606",
"107351729173510130769116311820837389032",
"91501648185702215607019393309815963145",
"338182466727032011823973421907386550463",
"119431072651088194710885999764879748168"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d28b256db525d9432bc3eb2c8d83f7d3f5e1cc87",
"target": {
"file": "block/blk-mq.c"
}
},
{
"id": "CVE-2024-50081-c53f5c06",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"153744501293659327014617594514192565856",
"278014547545789457638695617945350957078",
"4950540443379211462446883397040755606",
"107351729173510130769116311820837389032",
"91501648185702215607019393309815963145",
"338182466727032011823973421907386550463",
"119431072651088194710885999764879748168"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c25c0c9035bb8b28c844dfddeda7b8bdbcfcae95",
"target": {
"file": "block/blk-mq.c"
}
},
{
"id": "CVE-2024-50081-d1b316a8",
"signature_version": "v1",
"digest": {
"length": 968.0,
"function_hash": "319738523143345548788558283396884591720"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c25c0c9035bb8b28c844dfddeda7b8bdbcfcae95",
"target": {
"file": "block/blk-mq.c",
"function": "blk_mq_init_allocated_queue"
}
}
]