First published: Mon Jan 15 2024(Updated: )
A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel | <6.0 | 6.0 |
Linux Linux kernel | >=5.15<5.15.164 | |
Linux Linux kernel | >=5.16<5.19.6 | |
Linux Linux kernel | =6.0-rc1 | |
Linux Linux kernel | =6.0-rc2 | |
Redhat Enterprise Linux | =8.0 | |
Redhat Enterprise Linux | =9.0 |
https://patchwork.kernel.org/project/linux-mm/patch/20220801155034.3772543-1-khazhy@google.com/
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.