CVE-2024-50082

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc3-00013-geca631b8fe80

Description: A race condition exists between rq qos wait() and rq qos wake function() in the Linux kernel, leading to a crash. The issue occurs when rq qos wake function() deletes the waitqueue entry and then calls wake up process(), but rq qos wait() has already returned and clobbered the data->task pointer. This results in wake up process() being called with an invalid pointer, causing a crash. The estimated number of potentially affected devices is not specified.

Recommendations: To resolve the issue, update the Linux kernel to a version that includes the fix for the blk-rq-qos crash. As a temporary workaround, consider disabling the rq qos wake function() function until a patch is available. Restrict access to the vulnerable rq qos wait() function to minimize the risk of exploitation. Avoid using the data->task pointer in the affected code path until the issue is resolved.