In the Linux kernel, the following vulnerability has been resolved: blk-mq:
make sure active queue usage is held for bio_integrity_prep()
blk_integrity_unregister() can come if queue usage counter isn’t held for
one bio with integrity prepared, so this request may be completed with
calling profile->complete_fn, then kernel panic. Another constraint is that
bio_integrity_prep() needs to be called before bio merge. Fix the issue by:
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 22.04 | noarch | linux-aws-6.5 | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-azure-6.5 | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-gcp-6.5 | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-nvidia-6.5 | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-oracle-6.5 | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-starfive-6.5 | < any | UNKNOWN |
git.kernel.org/linus/b0077e269f6c152e807fdac90b58caf012cdbaab (6.7-rc2)
git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab
git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9
git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf
git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78
launchpad.net/bugs/cve/CVE-2023-52787
nvd.nist.gov/vuln/detail/CVE-2023-52787
security-tracker.debian.org/tracker/CVE-2023-52787
www.cve.org/CVERecord?id=CVE-2023-52787