PT-2026-94534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where resizing submit queues or poll queues via configfs on a device with shared tags enabled can lead to a kernel crash. When a shared tag set is...

PT-2026-94536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the null blk driver when shared tags is enabled. The null setup tagset function allocates a global tag set using null init global tag set. If device creation...

PT-2026-94535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the null blk driver when a zoned device is powered off and on repeatedly. The null init zoned dev function allocates the dev-zones array during power-on, but null...

PT-2026-94537

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where configfs register subsystem is called before register blkdev in the null init function. When null blk is used as a module, a race condition...

PT-2026-94538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the null blk component, a race condition exists during initialization. The mutex init&lock function is called after configfs register subsystem, which exposes the nullb subsystem to...

PT-2026-94532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the null blk driver where attribute store methods generated with NULLB DEVICE ATTR do not use locks when updating device configurations. Because the NULLB DEV ...

PT-2026-94533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where configfs attribute stores are not properly serialized with a lock. This occurs because the NULLB DEVICE ATTR store does not utilize a lock,...

DEBIAN-CVE-2025-38255

In the Linux kernel, the following vulnerability has been resolved: lib/groupcpus: fix NULL pointer dereference from groupcpusevenly While testing nullblk with configfs, echo 0 pollqueues will trigger following panic: BUG: kernel NULL pointer dereference, address: 0000000000000010 Oops: Oops: 000...

PT-2024-29250

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The issue is related to the null blk module in the Linux kernel, where the block size validation is incorrect. The block size should be between 512 and PAGE SIZE and be a power of 2. Without th...

PT-2022-29249

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential security issue has been identified in the Linux Kernel, where a null blk end timed out poll request occurs. The actual impact and attack plausibility have not yet been proven...