Loading HuntDB...

GHSA-rqh4-x2v7-j34g

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.

Related CVEs

Key Information

GHSA ID
GHSA-rqh4-x2v7-j34g
Published
January 12, 2024 12:30 AM
Last Modified
May 20, 2024 12:30 PM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.