In the Linux kernel, the following vulnerability has been resolved: block: fix q->blkglist corruption during disk rebind Multiple gendisk instances can allocated/added for single request queue in case of disk rebind. blkg may still stay in q->blkglist when calling blkcginitdisk() for rebind, then q->blkglist becomes corrupted. Fix the list corruption issue by: - add blkginitqueue() to initialize q->blkglist & q->blkcgmutex only - move calling blkginitqueue() into blkallocqueue() The list corruption should be started since commit f1c006f1c685 ("blk-cgroup: synchronize pdfreefn() from blkgfreeworkfn() and blkcgdeactivatepolicy()") which delays removing blkg from q->blkglist into blkgfreeworkfn().