Bug 2337146 (CVE-2024-57875) - CVE-2024-57875 kernel: block: RCU protect disk->conv_zones_bitmap
Summary: CVE-2024-57875 kernel: block: RCU protect disk->conv_zones_bitmap
Keywords:
Status: NEW
Alias: CVE-2024-57875
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-11 15:01 UTC by OSIDB Bzimport
Modified: 2025-02-04 16:03 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-01-11 15:01:34 UTC
In the Linux kernel, the following vulnerability has been resolved:

block: RCU protect disk->conv_zones_bitmap

Ensure that a disk revalidation changing the conventional zones bitmap
of a disk does not cause invalid memory references when using the
disk_zone_is_conv() helper by RCU protecting the disk->conv_zones_bitmap
pointer.

disk_zone_is_conv() is modified to operate under the RCU read lock and
the function disk_set_conv_zones_bitmap() is added to update a disk
conv_zones_bitmap pointer using rcu_replace_pointer() with the disk
zone_wplugs_lock spinlock held.

disk_free_zone_resources() is modified to call
disk_update_zone_resources() with a NULL bitmap pointer to free the disk
conv_zones_bitmap. disk_set_conv_zones_bitmap() is also used in
disk_update_zone_resources() to set the new (revalidated) bitmap and
free the old one.

Comment 1 Avinash Hanwate 2025-01-13 05:33:42 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025011107-CVE-2024-57875-7902@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.