Lucene search

K
osvGoogleOSV:UBUNTU-CVE-2024-38663
HistoryJun 24, 2024 - 2:15 p.m.

UBUNTU-CVE-2024-38663

2024-06-2414:15:00
Google
osv.dev
ubuntu
linux
kernel
vulnerability
fix
blk-cgroup
list corruption
io stat
security
issue
memset

AI Score

6.8

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 (“blk-cgroup: Optimize blkcg_rstat_flush()”), each iostat instance is added to blkcg percpu list, so blkcg_reset_stats() can’t reset the stat instance by memset(), otherwise the llist may be corrupted. Fix the issue by only resetting the counter part.