Ming LeiandGreg Kroah-Hartman 988ddb7721 blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none ...

[ Upstream commit 245165658e ]

After grabbing q->sysfs_lock, q->elevator may become NULL because of
elevator switch.

Fix the NULL dereference on q->elevator by checking it with lock.

Reported-by: Guangwu Zhang <guazhang@redhat.com>
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Link: https://lore.kernel.org/r/20230616132354.415109-1-ming.lei@redhat.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Leon Chen <leonchen.oss@139.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-06-01 17:38:44 +02:00

..

partitions

block: fix conversion of GPT partition name to 7-bit

2025-03-13 12:53:15 +01:00

badblocks.c

…

bdev.c

block: fix race between set_blocksize and read paths

2025-12-07 06:12:14 +09:00

bfq-cgroup.c

block,bfq: fix aux stat accumulation destination

2026-02-11 13:37:21 +01:00

bfq-iosched.c

block, bfq: fix bfqq uaf in bfq_limit_depth()

2025-03-07 16:56:41 +01:00

bfq-iosched.h

block, bfq: split sync bfq_queues on a per-actuator basis

2025-03-07 16:56:41 +01:00

bfq-wf2q.c

…

bio-integrity.c

block: initialize integrity buffer to zero before writing it to media

2024-08-03 08:48:53 +02:00

bio.c

scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer

2025-05-22 14:10:06 +02:00

blk-cgroup-fc-appid.c

…

blk-cgroup-rwstat.c

…

blk-cgroup-rwstat.h

…

blk-cgroup.c

blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

2026-02-06 16:44:23 +01:00

blk-cgroup.h

blk-cgroup: support to track if policy is online

2025-04-25 10:44:03 +02:00

blk-core.c

block: reject invalid operation in submit_bio_noacct

2025-08-28 16:26:10 +02:00

blk-crypto-fallback.c

blk-crypto: fix missing blktrace bio split events

2025-10-19 16:23:12 +02:00

blk-crypto-internal.h

…

blk-crypto-profile.c

…

blk-crypto-sysfs.c

…

blk-crypto.c

…

blk-flush.c

…

blk-ia-ranges.c

…

blk-integrity.c

blk-integrity: register sysfs attributes on struct device

2024-10-17 15:21:48 +02:00

blk-ioc.c

…

blk-iocost.c

blk-iocost: do not WARN if iocg was already offlined

2025-04-25 10:44:03 +02:00

blk-iolatency.c

…

blk-ioprio.c

…

blk-ioprio.h

…

blk-lib.c

…

blk-map.c

block: fix sanity checks in blk_rq_map_user_bvec

2024-11-08 16:26:45 +01:00

blk-merge.c

block: fix bio_split_rw_at to take zone_write_granularity into account

2024-12-14 19:53:15 +01:00

blk-mq-cpumap.c

…

blk-mq-debugfs-zoned.c

…

blk-mq-debugfs.c

blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()

2026-03-04 07:20:15 -05:00

blk-mq-debugfs.h

…

blk-mq-pci.c

…

blk-mq-rdma.c

…

blk-mq-sched.c

…

blk-mq-sched.h

…

blk-mq-sysfs.c

blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx

2025-10-15 11:56:27 +02:00

blk-mq-tag.c

block: Fix lockdep warning in blk_mq_mark_tag_wait

2024-08-29 17:30:33 +02:00

blk-mq-tag.h

…

blk-mq-virtio.c

…

blk-mq.c

blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

2026-06-01 17:38:44 +02:00

blk-mq.h

block: fix ordering between checking BLK_MQ_S_STOPPED request adding

2024-12-14 19:54:04 +01:00

blk-pm.c

…

blk-pm.h

…

blk-rq-qos.c

blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

2024-10-22 15:56:45 +02:00

blk-rq-qos.h

…

blk-settings.c

block: use int to store blk_stack_limits() return value

2025-10-15 11:56:27 +02:00

blk-stat.c

block: prevent division by zero in blk_rq_stat_sum()

2024-04-13 13:05:12 +02:00

blk-stat.h

…

blk-sysfs.c

block: fix resource leak in blk_register_queue() error path

2026-04-11 14:16:34 +02:00

blk-throttle.c

…

blk-throttle.h

…

blk-timeout.c

…

blk-wbt.c

…

blk-wbt.h

…

blk-zoned.c

block: fix race between set_blocksize and read paths

2025-12-07 06:12:14 +09:00

blk.h

blk-integrity: register sysfs attributes on struct device

2024-10-17 15:21:48 +02:00

bounce.c

…

bsg-lib.c

blk-mq: move the call to blk_put_queue out of blk_mq_destroy_queue

2026-04-11 14:16:33 +02:00

bsg.c

…

disk-events.c

…

elevator.c

block: Fix elevator_get_default() checking for NULL q->tag_set

2024-11-17 15:07:20 +01:00

elevator.h

…

fops.c

block: fix race between set_blocksize and read paths

2025-12-07 06:12:14 +09:00

genhd.c

block: rate-limit capacity change info log

2026-01-11 15:18:50 +01:00

holder.c

…

ioctl.c

block: fix race between set_blocksize and read paths

2025-12-07 06:12:14 +09:00

ioprio.c

…

Kconfig

…

Kconfig.iosched

…

kyber-iosched.c

…

Makefile

…

mq-deadline.c

block/mq-deadline: Fix the tag reservation code

2024-08-14 13:53:02 +02:00

opal_proto.h

block: sed-opal: handle empty atoms when parsing response

2024-03-26 18:20:26 -04:00

sed-opal.c

block: sed-opal: handle empty atoms when parsing response

2024-03-26 18:20:26 -04:00

t10-pi.c

…