https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:29:54 +0000 https://db.gcve.eu/vuln/cve-2023-54227 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>blk-mq: fix tags leak when shrink nr_hw_queues</p> <p>Although we don&#39;t need to realloc set-&gt;tags[] when shrink nr_hw_queues, we need to free them. Or these tags will be leaked.</p> <p>How to reproduce: 1. mount -t configfs configfs /mnt 2. modprobe null_blk nr_devices=0 submit_queues=8 3. mkdir /mnt/nullb/nullb0 4. echo 1 &gt; /mnt/nullb/nullb0/power 5. echo 4 &gt; /mnt/nullb/nullb0/submit_queues 6. rmdir /mnt/nullb/nullb0</p> <p>In step 4, will alloc 9 tags (8 submit queues and 1 poll queue), then in step 5, new_nr_hw_queues = 5 (4 submit queues and 1 poll queue). At last in step 6, only these 5 tags are freed, the other 4 tags leaked.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>blk-mq: fix tags leak when shrink nr_hw_queues</p> <p>Although we don&#39;t need to realloc set-&gt;tags[] when shrink nr_hw_queues, we need to free them. Or these tags will be leaked.</p> <p>How to reproduce: 1. mount -t configfs configfs /mnt 2. modprobe null_blk nr_devices=0 submit_queues=8 3. mkdir /mnt/nullb/nullb0 4. echo 1 &gt; /mnt/nullb/nullb0/power 5. echo 4 &gt; /mnt/nullb/nullb0/submit_queues 6. rmdir /mnt/nullb/nullb0</p> <p>In step 4, will alloc 9 tags (8 submit queues and 1 poll queue), then in step 5, new_nr_hw_queues = 5 (4 submit queues and 1 poll queue). At last in step 6, only these 5 tags are freed, the other 4 tags leaked.</p> https://db.gcve.eu/vuln/cve-2023-54227