Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2024-36908— blk-iocost: do not WARN if iocg was already offlined

AI Predicted 4.3 Difficulty: Theoretical EPSS 0.23% · P15

Possible ATT&CK Techniques 1AI

T1496 · Resource Hijacking

Affected Version Matrix 14

VendorProductVersion RangeStatus
LinuxLinux7caa47151ab2e644dd221f741ec7578d9532c9a3< 56a9d07f427378eeb75b917bb49c6fbea8204126affected
7caa47151ab2e644dd221f741ec7578d9532c9a3< 7d215e013d097ed6fc4b0ad0272c9514214dc408affected
7caa47151ab2e644dd221f741ec7578d9532c9a3< aed0aac18f039dd4af13c143063754efca358cb0affected
7caa47151ab2e644dd221f741ec7578d9532c9a3< 1c172ac7afe4442964f4153b2c78fe4e005d9d67affected
7caa47151ab2e644dd221f741ec7578d9532c9a3< 14b3275f93d4a0d8ddc02195bc4e9869b7a3700eaffected
7caa47151ab2e644dd221f741ec7578d9532c9a3< 01bc4fda9ea0a6b52f12326486f07a4910666cf6affected
5.4affected
< 5.4unaffected
… +6 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-36908

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
blk-iocost: do not WARN if iocg was already offlined
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(), warn is triggered if 'active_list' is empty, which is intended to confirm iocg is active when it has debt. However, warn can be triggered during a blkcg or disk removal, if iocg_waitq_timer_fn() is run at that time: WARNING: CPU: 0 PID: 2344971 at block/blk-iocost.c:1402 iocg_pay_debt+0x14c/0x190 Call trace: iocg_pay_debt+0x14c/0x190 iocg_kick_waitq+0x438/0x4c0 iocg_waitq_timer_fn+0xd8/0x130 __run_hrtimer+0x144/0x45c __hrtimer_run_queues+0x16c/0x244 hrtimer_interrupt+0x2cc/0x7b0 The warn in this situation is meaningless. Since this iocg is being removed, the state of the 'active_list' is irrelevant, and 'waitq_timer' is canceled after removing 'active_list' in ioc_pd_free(), which ensures iocg is freed after iocg_waitq_timer_fn() returns. Therefore, add the check if iocg was already offlined to avoid warn when removing a blkcg or disk.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 blk-iocost 模块存在漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 7caa47151ab2e644dd221f741ec7578d9532c9a3 ~ 56a9d07f427378eeb75b917bb49c6fbea8204126 -
LinuxLinux 5.4 -

II. Public POCs for CVE-2024-36908

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-36908

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-36908 (2)

Other References for CVE-2024-36908 (1)

Other References for CVE-2024-36908 (3)

Same Patch Batch · Linux · 2024-05-30 · 93 CVEs total

CVE-2024-369589.8 CRITICALNFSD: Fix nfsd4_encode_fattr4() crasher
CVE-2024-368869.8 CRITICALtipc: fix UAF in error path
CVE-2024-369119.8 CRITICALhv_netvsc: Don't free decrypted memory
CVE-2024-369129.6 CRITICALDrivers: hv: vmbus: Track decrypted status in vmbus_gpadl
CVE-2024-369139.3 CRITICALDrivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
CVE-2024-369099.3 CRITICALDrivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
CVE-2024-369228.8 HIGHwifi: iwlwifi: read txq->read_ptr under lock
CVE-2024-369218.8 HIGHwifi: iwlwifi: mvm: guard against invalid STA ID on removal
CVE-2024-369108.4 HIGHuio_hv_generic: Don't free decrypted memory
CVE-2024-360328.1 HIGHBluetooth: qca: fix info leak when fetching fw build id
CVE-2024-369337.8 HIGHnsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
CVE-2024-369047.8 HIGHtcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
CVE-2024-369147.8 HIGHdrm/amd/display: Skip on writeback when it's not applicable
CVE-2024-369187.8 HIGHbpf: Check bloom filter map value size
CVE-2024-360187.8 HIGHnouveau/uvmm: fix addr/range calcs for remap operations
CVE-2024-368947.8 HIGHusb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
CVE-2024-368907.8 HIGHmm/slab: make __free(kfree) accept error pointers
CVE-2024-369407.8 HIGHpinctrl: core: delete incorrect free in pinctrl_enable()
CVE-2024-369287.8 HIGHs390/qeth: Fix kernel panic after setting hsuid
CVE-2024-368847.8 HIGHiommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()

Showing top 20 of 93 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-36908

No comments yet

Leave a comment