CVE-2024-38384

Updated: 2024-08-13 02:33:47.484602

Description:

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued __blkcg_rstat_flush() can be run anytime, especially when blk_cgroup_bio_start is being executed. If WRITE of `->lqueued` is re-ordered with READ of 'bisc->lnode.next' in the loop of __blkcg_rstat_flush(), `next_bisc` can be assigned with one stat instance being added in blk_cgroup_bio_start(), then the local list in __blkcg_rstat_flush() could be corrupted. Fix the issue by adding one barrier.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x NONE 0
CVSS Version 3.x MEDIUM 4.4

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 4.4 MEDIUM Released CLSA-2024:1725293298 2024-09-02 12:12:52
AlmaLinux 9.2 FIPS kernel 5.14.0 4.4 MEDIUM Released CLSA-2024:1725304408 2024-09-02 17:23:48
CentOS 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-13 14:24:30
CentOS 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-13 14:24:29
CentOS 8.4 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-13 14:24:30
CentOS 8.5 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-13 14:24:30
CentOS Stream 8 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-13 14:24:29
CloudLinux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-13 14:24:30
CloudLinux 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-13 14:24:29
Oracle Linux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-13 14:24:29