Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2023-52787
HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52787

2024-05-2116:15:17
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
vulnerability
resolved
blk-mq
bio_integrity_prep
issue
bio merge
kernel panic

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: make sure active queue usage is held for bio_integrity_prep()

blk_integrity_unregister() can come if queue usage counter isn’t held
for one bio with integrity prepared, so this request may be completed with
calling profile->complete_fn, then kernel panic.

Another constraint is that bio_integrity_prep() needs to be called
before bio merge.

Fix the issue by:

  • call bio_integrity_prep() with one queue usage counter grabbed reliably

  • call bio_integrity_prep() before bio merge

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%