Double Free of blk_mq_tag_set in dev remove after table load fails in Kernel
Summary
GSD-2021-1000094: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails. Affects Kernel versions >= 1c357a1e86a4227a6b6059f2de118ae47659cebc, < 6086f957416a6e87236c06079fcaba7a3998aeca. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The vulnerability in question affects the Kernel's dm rq module, which is responsible for handling block I/O requests for device mapper devices. This vulnerability arises when a double free of blk_mq_tag_set occurs during the removal of a device after a table load failure.
Vulnerability Detail
The vulnerability occurs in the dm rq module of the Kernel when a device removal is attempted after a table load failure. During this process, a double free of blk_mq_tag_set is triggered, leading to potential memory corruption and subsequent system instability. An attacker with local access to the system could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
The vulnerability has been addressed in Linux Kernel version v5.11.20 through commit 6086f957416a6e87236c06079fcaba7a3998aeca. To fix the vulnerability, users are advised to update their Kernel to the latest version available. This can be done by obtaining the updated Kernel source code from the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the provided instructions.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The double free vulnerability in the dm rq module of the Kernel can potentially lead to memory corruption and system instability. It is crucial for users to update their Kernel to the latest version (v5.11.20 or later) to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software.
The dm rq module is responsible for handling block I/O requests for device mapper devices in the Kernel.
A double free vulnerability occurs when a program attempts to free a memory block that has already been freed, potentially leading to memory corruption and system instability.
Memory corruption refers to the unintended modification of data in a computer's memory, which can result in program crashes, data loss, or unauthorized access.
No, this vulnerability requires local access to the system in order to be exploited.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.