CVE-2024-36908
Published: May 30, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(), warn is triggered if 'active_list' is empty, which is intended to confirm iocg is active when it has debt. However, warn can be triggered during a blkcg or disk removal, if iocg_waitq_timer_fn() is run at that time: WARNING: CPU: 0 PID: 2344971 at block/blk-iocost.c:1402 iocg_pay_debt+0x14c/0x190 Call trace: iocg_pay_debt+0x14c/0x190 iocg_kick_waitq+0x438/0x4c0 iocg_waitq_timer_fn+0xd8/0x130 __run_hrtimer+0x144/0x45c __hrtimer_run_queues+0x16c/0x244 hrtimer_interrupt+0x2cc/0x7b0 The warn in this situation is meaningless. Since this iocg is being removed, the state of the 'active_list' is irrelevant, and 'waitq_timer' is canceled after removing 'active_list' in ioc_pd_free(), which ensures iocg is freed after iocg_waitq_timer_fn() returns. Therefore, add the check if iocg was already offlined to avoid warn when removing a blkcg or disk.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 7caa47151ab2e644dd221f741ec7578d9532c9a3 - < 56a9d07f427378eeb75b917bb49c6fbea8204126affected 7caa47151ab2e644dd221f741ec7578d9532c9a3 - < 7d215e013d097ed6fc4b0ad0272c9514214dc408affected 7caa47151ab2e644dd221f741ec7578d9532c9a3 - < aed0aac18f039dd4af13c143063754efca358cb0affected 7caa47151ab2e644dd221f741ec7578d9532c9a3 - < 1c172ac7afe4442964f4153b2c78fe4e005d9d67affected 7caa47151ab2e644dd221f741ec7578d9532c9a3 - < 14b3275f93d4a0d8ddc02195bc4e9869b7a3700e+1 more versions |
Linux | Linux | affected 5.4unaffected 0 - < 5.4unaffected 5.10.237 - <= 5.10.*unaffected 5.15.181 - <= 5.15.*unaffected 6.1.135 - <= 6.1.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now