CVE-2022-49694
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49694
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49694.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-49694
- Downstream
- Related
- Published
- 2025-02-26T07:01:44Z
- Modified
- 2025-03-24T19:27:40Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
block: disable the elevator int del_gendisk
The elevator is only used for file system requests, which are stopped in delgendisk. Move disabling the elevator and freeing the scheduler tags to the end of delgendisk instead of doing that work in diskrelease and blkcleanupqueue to avoid a use after free on q->tagset from diskrelease as the tagset might not be alive at that point.
Move the blkqosexit call as well, as it just depends on the elevator exit and would be the only reason to keep the not exactly cheap queue freeze in disk_release.
- References
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source