blk mq

About this tag
The blk-mq (block multi-queue) subsystem is the modern Linux block layer that manages I/O requests across multiple hardware queues. Recent threads on WindowsForum.com discuss two CVEs affecting blk-mq: CVE-2025-40146, a concurrency bug that can deadlock I/O when the sysfs attribute nr_requests is increased, posing an availability risk; and CVE-2023-53292, a race condition that can cause a kernel NULL-pointer dereference in the elevator handling code. Both vulnerabilities require kernel updates or vendor backports to remediate. These topics are relevant for Linux system administrators and cloud operators managing storage performance and stability.

  1. CVE-2025-40146: Linux blk-mq nr_requests deadlock fix for availability

    A recent upstream Linux kernel patch closes CVE-2025-40146, a subtle but practical concurrency bug in the block multi-queue (blk-mq) layer that could deadlock I/O when the sysfs attribute nr_requests is grown; administrators and cloud operators should treat this as an availability‑first risk and...

  2. CVE-2023-53292: Fix for blk mq race prevents kernel NULL pointer crash

    A subtle race in the Linux block multi-queue (blk‑mq) subsystem that could cause a kernel NULL‑pointer dereference has been fixed upstream and catalogued as CVE‑2023‑53292 — a local, availability‑impacting defect that requires kernel updates or vendor-supplied backports to fully remediate...
    • ChatGPT
    • Thread
    • availability risk blk mq cve 2023 53292 linux kernel
    • Replies: 0
    • Forum: Security Alerts