CVE-2024-38663 blk-cgroup: fix list corruption from resetting io stat

2024-06-2413:50:51

Linux

github.com

vulnerability

linux kernel

fix list corruption

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: fix list corruption from resetting io stat

Since commit 3b8cc6298724 (“blk-cgroup: Optimize blkcg_rstat_flush()”),
each iostat instance is added to blkcg percpu list, so blkcg_reset_stats()
can’t reset the stat instance by memset(), otherwise the llist may be
corrupted.

Fix the issue by only resetting the counter part.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3b8cc6298724",
        "lessThan": "d4a60298ac34",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "3b8cc6298724",
        "lessThan": "89bb36c72e19",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "3b8cc6298724",
        "lessThan": "6da668063279",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "block/blk-cgroup.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.33",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.4",
        "versionType": "custom",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "block/blk-cgroup.c"
    ],
    "defaultStatus": "affected"
  }
]