Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-38663
HistoryJun 25, 2024 - 12:00 a.m.

CVE-2024-38663

2024-06-2500:00:00
ubuntu.com
ubuntu.com
2
linux kernel
blk-cgroup
list corruption
fix
vulnerability
io stat
commit
percpu list
llist
counter part
unix

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix list corruption from resetting io stat
Since commit 3b8cc6298724 (“blk-cgroup: Optimize blkcg_rstat_flush()”),
each iostat instance is added to blkcg percpu list, so blkcg_reset_stats()
can’t reset the stat instance by memset(), otherwise the llist may be
corrupted.
Fix the issue by only resetting the counter part.

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%