In the Linux kernel, the following vulnerability has been resolved:
aoe: clean device rqlist in aoedevdowndev()
An aoe device's rqlist contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blkmq. However, the queue was not cleaned out when an aoe device is downed which caused blkmqfreezequeue() to sleep indefinitely waiting for those requests to complete, causing a hang. This fix cleans out the queue before calling blkmqfreezequeue().