CVE-2023-54088

A locking flaw was found in the Linux kernel's block cgroup subsystem. When removing blkg->q_node from q->blkg_list in blkg_free_workfn(), the code fails to hold queue_lock. This missing lock allows concurrent access from blkg_destroy_all(), leading to list corruption and potential hard lockups.

This flaw affects systems using block cgroups (blkcg) for I/O resource control. The missing lock can cause list corruption during blkcg cleanup operations, potentially leading to system hangs or crashes. Systems actively using cgroups v1 or v2 for I/O control are affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.