Linux vulnerability

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL because of elevator switch. Fix the NULL dereference on q->elevator by checking it with lock.

Published 16 Sep 2025Updated 8 Sep 20264 sources
CVSS 5.5

What happened

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL because of elevator switch. Fix the NULL dereference on q->elevator by checking it with lock.

Affected versions

Linux: 5fd7a84a09e640016fe106dd3e992f5210e23dc7 through before 988ddb77218d3975dd13dee7bb0e1fae098a9fdb (git); 5fd7a84a09e640016fe106dd3e992f5210e23dc7 through before 3e977386521b71471e66ec2ba82efdfcc456adf2 (git); 5fd7a84a09e640016fe106dd3e992f5210e23dc7 through before 245165658e1c9f95c0fecfe02b9b1ebd30a1198a (git); 5.19; V3.1.6 through before * (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.