CVE-2024-36478

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the Linux kernel when configuring 'power' and 'submit queues' concurrently, which can trigger a kernel panic. This occurs because del gendisk() can run concurrently with blk mq update nr hw queues(). The problem can be fixed by reusing the global mutex to protect nullb device power store() and nullb update nr hw queues() from configfs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.