---
id: CVE-2023-54088
title: 'blk-cgroup: hold queue_lock when removing blkg->q_node'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  blk-cgroup: hold queue_lock when removing blkg->q_node

  When blkg is removed from q->blkg_list from blkg_free_workfn(), queue_lock
  has to be held, otherwise, all kinds …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 81c1188905f88b77743d1fdeeedfc8cb7b67787d <
    b5dae1cd0d8368b4338430ff93403df67f0b8bcc
  - >-
    Linux >= bfe46d2efe46c5c952f982e2ca94fe2ec5e58e2a <
    083b58373463a6e5ee60ecb135269348f68ad7df
  - >-
    Linux >= f1c006f1c6850c14040f8337753a63119bba39b9 <
    cd4ffdf56791eec95af01f06bee1ec7665ca75c4
  - >-
    Linux >= f1c006f1c6850c14040f8337753a63119bba39b9 <
    c164c7bc9775be7bcc68754bb3431fce5823822e
  - Linux >= 6.1.16 < 6.1.17
  - Linux >= 6.2.3 < 6.2.4
  - Linux 6.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:17.912163Z'
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:39.244Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-54088'
references:
  - url: 'https://git.kernel.org/stable/c/b5dae1cd0d8368b4338430ff93403df67f0b8bcc'
  - url: 'https://git.kernel.org/stable/c/083b58373463a6e5ee60ecb135269348f68ad7df'
  - url: 'https://git.kernel.org/stable/c/cd4ffdf56791eec95af01f06bee1ec7665ca75c4'
  - url: 'https://git.kernel.org/stable/c/c164c7bc9775be7bcc68754bb3431fce5823822e'
tags:
  - cve.org
epss: 0.00165
epssPercentile: 0.05386
ingestedAt: '2026-10-15T22:48:25.428Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: hold queue_lock when removing blkg->q_node

When blkg is removed from q->blkg_list from blkg_free_workfn(), queue_lock
has to be held, otherwise, all kinds of bugs(list corruption, hard lockup,
..) can be triggered from blkg_destroy_all().

## Affected

- `Linux >= 81c1188905f88b77743d1fdeeedfc8cb7b67787d < b5dae1cd0d8368b4338430ff93403df67f0b8bcc`
- `Linux >= bfe46d2efe46c5c952f982e2ca94fe2ec5e58e2a < 083b58373463a6e5ee60ecb135269348f68ad7df`
- `Linux >= f1c006f1c6850c14040f8337753a63119bba39b9 < cd4ffdf56791eec95af01f06bee1ec7665ca75c4`
- `Linux >= f1c006f1c6850c14040f8337753a63119bba39b9 < c164c7bc9775be7bcc68754bb3431fce5823822e`
- `Linux >= 6.1.16 < 6.1.17`
- `Linux >= 6.2.3 < 6.2.4`
- `Linux 6.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.