um: ubd: Do not use drvdata in release

{
  "id": "cb435956e41a10878b47a9949eefe5003649b0cadf6934809b5a37d2ec314db2",
  "url": "https://osv.dev/vulnerability/CVE-2024-53184",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "um: ubd: Do not use drvdata in release",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use container_of() to get the ubd instance. Otherwise, removing a ubd device will result in a crash: RIP: 0033:blk_mq_free_tag_set+0x1f/0xba RSP: 00000000e2083bf0 EFLAGS: 00010246 RAX: 000000006021463a RBX: 0000000000000348 RCX: 0000000062604d00 RDX: 0000000004208060 RSI: 00000000605241a0 RDI: 0000000000000348 RBP: 00000000e2083c10 R08: 0000000062414010 R09: 00000000601603f7 R10: 000000000000133a R11: 000000006038c4bd R12: 0000000000000000 R13: 0000000060213a5c R14: 0000000062405d20 R15: 00000000604f7aa0 Kernel panic - not syncing: Segfault with no mm CPU: 0 PID: 17 Comm: kworker/0:1 Not tainted 6.8.0-rc3-00107-gba3f67c11638 #1 Workqueue: events mc_work_proc Stack: 00000000 604f7ef0 62c5d000 62405d20 e2083c30 6002c776 6002c755 600e47ff e2083c60 6025ffe3 04208060 603d36e0 Call Trace: [<6002c776>] ubd_device_release+0x21/0x55 [<6002c755>] ? ubd_device_release+0x0/0x55 [<600e47ff>] ? kfree+0x0/0x100 [<6025ffe3>] device_release+0x70/0xba [<60381d6a>] kobject_put+0xb5/0xe2 [<6026027b>] put_device+0x19/0x1c [<6026a036>] platform_device_put+0x26/0x29 [<6026ac5a>] platform_device_unregister+0x2c/0x2e [<6002c52e>] ubd_remove+0xb8/0xd6 [<6002bb74>] ? mconsole_reply+0x0/0x50 [<6002b926>] mconsole_remove+0x160/0x1cc [<6002bbbc>] ? mconsole_reply+0x48/0x50 [<6003379c>] ? um_set_signals+0x3b/0x43 [<60061c55>] ? update_min_vruntime+0x",
    "evidence": "osv:CVE-2024-53184",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.19.325",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.4.287",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.231",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.174",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.120",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.64",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.11.11",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.2",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2024-53184",
      "aliases": [
        "CVE-2024-53184"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0998d0631001288a5974afc0b2a5f568bcdecb4d"
                },
                {
                  "fixed": "23d742a3fcd4781eed015a3a93e6a0e3ab1ef2a8"
                },
                {
                  "fixed": "300e277e463e6326938dd55ea560eafa0f5c88a5"
                },
                {
                  "fixed": "509ba8746f812e45a05034ba18b73db574693d11"
                },
                {
                  "fixed": "5727343348f34e11a7c5a2a944d5aa505731d876"
                },
                {
                  "fixed": "a5a75207efae4b558aaa34c288de7d6f2e926b4b"
                },
                {
                  "fixed": "2d194d951895df214e066d08146e77cb6e02c1d4"
                },
                {
                  "fixed": "e6e5a4cded9bef3a1b0a4fac815b7176eb9a18ec"
                },
                {
                  "fixed": "16cf8511680809a9f20b3dd224c06d482648f9e2"
                },
                {
                  "fixed": "5bee35e5389f450a7eea7318deb9073e9414d3b1"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53184.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "3.6.0"
                },
                {
                  "fixed": "4.19.325"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.20.0"
                },
                {
                  "fixed": "5.4.287"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.231"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.174"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.120"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.64"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.11.11"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.12.0"
                },
                {
                  "fixed": "6.12.2"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53184.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:40.383724996Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/16cf8511680809a9f20b3dd224c06d482648f9e2",
        "https://git.kernel.org/stable/c/23d742a3fcd4781eed015a3a93e6a0e3ab1ef2a8",
        "https://git.kernel.org/stable/c/2d194d951895df214e066d08146e77cb6e02c1d4",
        "https://git.kernel.org/stable/c/300e277e463e6326938dd55ea560eafa0f5c88a5",
        "https://git.kernel.org/stable/c/509ba8746f812e45a05034ba18b73db574693d11",
        "https://git.kernel.org/stable/c/5727343348f34e11a7c5a2a944d5aa505731d876",
        "https://git.kernel.org/stable/c/5bee35e5389f450a7eea7318deb9073e9414d3b1",
        "https://git.kernel.org/stable/c/a5a75207efae4b558aaa34c288de7d6f2e926b4b",
        "https://git.kernel.org/stable/c/e6e5a4cded9bef3a1b0a4fac815b7176eb9a18ec",
        "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html",
        "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53184.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-53184",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53184.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-53184",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 507874,
  "published_at": "2024-12-27T13:49:27.184+00:00"
}