CVE-2023-54088: Linux

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: hold queue_lock when removing blkg->q_node When blkg is removed from q->blkg_list from blkg_free_workfn(), queue_lock has to be held, otherwise, all kinds of bugs(list corruption, hard lockup, ..) can be triggered from blkg_destroy_all().

Affected products

• Linux Linux: from 6.1.16, before 6.1.17 (fixed in 6.1.17); from 6.2.3, before 6.2.4 (fixed in 6.2.4); from 6.3, before 6.4.12 (fixed in 6.4.12)

Published 2025-12-24. Last modified 2026-08-04.