Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-38384
HistoryJun 24, 2024 - 12:00 a.m.

CVE-2024-38384

2024-06-2400:00:00
ubuntu.com
ubuntu.com
1
linux kernel
vulnerability
blk-cgroup
list corruption
write
flush
barrier

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
__blkcg_rstat_flush() can be run anytime, especially when
blk_cgroup_bio_start is being executed. If WRITE of ->lqueued is
re-ordered with READ of ‘bisc->lnode.next’ in the loop of
__blkcg_rstat_flush(), next_bisc can be assigned with one stat instance
being added in blk_cgroup_bio_start(), then the local list in
__blkcg_rstat_flush() could be corrupted. Fix the issue by adding one
barrier.

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%