Linux Kernel Vulnerability Affecting System Stability

CVE-2023-53292

What is CVE-2023-53292?

A vulnerability in the Linux Kernel has been identified that involves a possible NULL dereference when accessing the elevator associated with the blk-mq subsystem. This issue arises when the system's elevator is switched, resulting in a scenario where the elevator pointer may unexpectedly become NULL. The vulnerability is mitigated by implementing a check on the q->elevator after acquiring the sysfs_lock, ensuring the system remains stable and operational.

References