Bug 2348285 (CVE-2021-47646) - CVE-2021-47646 kernel: Revert "Revert "block, bfq: honor already-setup queue merges""
Summary: CVE-2021-47646 kernel: Revert "Revert "block, bfq: honor already-setup queue ...
Keywords:
Status: NEW
Alias: CVE-2021-47646
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-02-26 03:24 UTC by OSIDB Bzimport
Modified: 2025-02-27 08:48 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-02-26 03:24:07 UTC
In the Linux kernel, the following vulnerability has been resolved:

Revert "Revert "block, bfq: honor already-setup queue merges""

A crash [1] happened to be triggered in conjunction with commit
2d52c58b9c9b ("block, bfq: honor already-setup queue merges"). The
latter was then reverted by commit ebc69e897e17 ("Revert "block, bfq:
honor already-setup queue merges""). Yet, the reverted commit was not
the one introducing the bug. In fact, it actually triggered a UAF
introduced by a different commit, and now fixed by commit d29bd41428cf
("block, bfq: reset last_bfqq_created on group change").

So, there is no point in keeping commit 2d52c58b9c9b ("block, bfq:
honor already-setup queue merges") out. This commit restores it.

[1] https://bugzilla.kernel.org/show_bug.cgi?id=214503

Comment 1 Avinash Hanwate 2025-02-26 21:06:27 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022648-CVE-2021-47646-d726@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.