blk-mq: fix IO hang from sbitmap wakeup race — CVE-2024-26671

Summary

Advisory CVE-2024-26671. blk-mq: fix IO hang from sbitmap wakeup race Vendor: Microsoft. Source: MSRC. Threat: medium. CVSS 4.7. See the official advisory for details.

What to do

General, cautious steps (verify details in the official source):

• Review exposure and plan remediation based on risk and environment.
• Identify affected product versions in your inventory and verify whether you are impacted.
• Apply vendor patches/updates or recommended mitigations as soon as available.
• Read the official advisory for exact affected versions and remediation steps.

Official advisory

Read the official source

Related advisories

• __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756
• <vuln:Note Title="Mariner" Type="Tag" Ordinal="20">Mariner CVE-2022-27651
• <vuln:Note Title="Mariner" Type="Tag" Ordinal="20">Mariner CVE-2022-2795
• <vuln:Note Title="Mariner" Type="Tag" Ordinal="20">Mariner CVE-2021-3602
• <vuln:Note Title="Mariner" Type="Tag" Ordinal="20">Mariner CVE-2021-3636
• <vuln:Note Title="Mariner" Type="Tag" Ordinal="20">Mariner CVE-2022-26691
• Apache HTTP Server: HTTP Response Splitting in multiple modules CVE-2024-24795
• Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability CVE-2024-28917
• Azure Compute Gallery Elevation of Privilege Vulnerability CVE-2024-21424
• Azure Identity Library for .NET Information Disclosure Vulnerability CVE-2024-29992
• Azure Migrate Remote Code Execution Vulnerability CVE-2024-26193
• Azure Private 5G Core Denial of Service Vulnerability CVE-2024-20685