CVE-2023-52787
kernel: blk-mq: make sure active queue usage is held for bio_integrity_prep()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 21, 2024
Updated · March 4, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: make sure active queue usage is held for bio_integrity_prep()
blk_integrity_unregister() can come if queue usage counter isn't held for one bio with integrity prepared, so this request may be completed with calling profile->complete_fn, then kernel panic.
Another constraint is that bio_integrity_prep() needs to be called before bio merge.
Fix the issue by:
-
call bio_integrity_prep() with one queue usage counter grabbed reliably
-
call bio_integrity_prep() before bio merge
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')