CVE-2024-38663: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()"), each iostat instance is added to blkcg percpu list, so blkcg_reset_stats() can't reset the stat instance by memset(), otherwise the llist may be corrupted. Fix the issue by only resetting the counter part.

Affected products

• Linux Linux Kernel: from 6.2, before 6.6.33 (fixed in 6.6.33); from 6.7, before 6.9.4 (fixed in 6.9.4)

Published 2024-06-24. Last modified 2026-08-04.