THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-53170 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not called during scsi probe, by checking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared in del_gendisk by co

[NVD] CVE-2024-53170 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not called during scsi probe, by checking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared in del_gendisk by co

lownvdPublished 2024-12-27

CVE-2024-53170 CVSS: 7.8 HIGH Published: 2024-12-27T14:15:24.183

In the Linux kernel, the following vulnerability has been resolved:

block: fix uaf for flush rq while iterating tags

blk_mq_clear_flush_rq_mapping() is not called during scsi probe, by checking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared in del_gendisk by commit aec89dc5d421 ("block: keep q_usage_counter in ato

Indicators of compromise

CVE-2024-53170cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-53170