Vulnerability in Linux Kernel: block: don't delete queue kobject before its children
Summary
GSD-2022-1001276: block: don't delete queue kobject before its children. Affects Kernel versions >= 2c2086afc2b8b974fac32cb028e73dc27bfae442, < 3d7e32c8da45957326f56937e0471c686d1a7711. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing hardware resources, memory, and system processes. The block subsystem within the Linux Kernel is responsible for handling block devices such as hard drives and SSDs. It includes a queue kobject that represents a block device's request queue and its associated attributes. This vulnerability specifically affects the block subsystem in the Linux Kernel.
Vulnerability Detail
The vulnerability arises from a flaw in the block subsystem's handling of queue kobjects. It allows for the deletion of a queue kobject before its children have been properly handled, potentially leading to use-after-free or other memory-related issues. An attacker could exploit this vulnerability to execute arbitrary code, escalate privileges, or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.2 or later. This fix was implemented in commit 3d7e32c8da45957326f56937e0471c686d1a7711. Users can obtain the updated kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the Linux Kernel's block subsystem can lead to serious security issues if left unaddressed. It is crucial to update the kernel to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is an open-source operating system kernel that forms the core of various Linux distributions. It provides essential functionality for managing hardware resources, memory, and system processes.
The block subsystem in the Linux Kernel is responsible for handling block devices such as hard drives and SSDs. It includes a queue kobject that represents a block device's request queue and its associated attributes.
A queue kobject is a data structure within the block subsystem that represents a block device's request queue and its associated attributes.
This vulnerability could allow an attacker to execute arbitrary code, escalate privileges, or cause a denial-of-service condition.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.2 or later. Users can obtain the updated kernel from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.