CVE Database›Document archive›CVE-2024-57875

CVE-2024-57875

kernel: block: RCU protect disk->conv_zones_bitmap

Loading…

Severity

Moderate

Red Hat Product Security

6.7

CVSS 3.1

Review impact separately from score.

Published · January 11, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

block: RCU protect disk->conv_zones_bitmap

Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the disk_zone_is_conv() helper by RCU protecting the disk->conv_zones_bitmap pointer.

disk_zone_is_conv() is modified to operate under the RCU read lock and the function disk_set_conv_zones_bitmap() is added to update a disk conv_zones_bitmap pointer using rcu_replace_pointer() with the disk zone_wplugs_lock spinlock held.

disk_free_zone_resources() is modified to call disk_update_zone_resources() with a NULL bitmap pointer to free the disk conv_zones_bitmap. disk_set_conv_zones_bitmap() is also used in disk_update_zone_resources() to set the new (revalidated) bitmap and free the old one.

Statement

This vulnerability is rated as Moderate impact because exploitation is constrained to local access, requires elevated privileges to initiate disk revalidation, and specifically depends on the presence of zoned block devices. Typical Red Hat Enterprise Linux deployments do not utilize zoned storage devices by default, significantly limiting exposure in standard environments. While a concurrent revalidation operation can trigger a kernel crash or memory corruption, it cannot be exploited remotely.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free