UBUNTU-CVE-2023-54271

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkgpolicydata being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP: 0010:rawspinlock+0x17/0x30...

CVE-2023-54271

CVE-2023-54271 concerns a NULL pointer dereference in the Linux kernel related to block cgroup handling. The issue arises when blkcg_activate_policy installs blkg_policy_data before ioc_weight policy data is fully initialized, causing a race with ioc_weight_write() that can encounter an uninitial...

kernel: Linux kernel: Denial of Service via NULL pointer dereference in blk-cgroup

A flaw was found in the Linux kernel's block cgroup blk-cgroup component. A local attacker could exploit a race condition in the blkcgactivatepolicy function, where block group policy data blkgpolicydata is installed before it is fully initialized. This allows another function, iocweightwrite, to...