CVE-2024-0562
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-0562
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0562.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-0562
- Related
- Published
- 2024-01-15T19:15:08Z
- Modified
- 2024-09-18T01:00:19Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdiunregister is called to stop further write-back and waits for associated delayed work to complete. However, wbinodewritebackend() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.
- References
-
- https://access.redhat.com/errata/RHSA-2024:0412
- https://patchwork.kernel.org/project/linux-mm/patch/20220801155034.3772543-1-khazhy@google.com/
- https://bugzilla.redhat.com/show_bug.cgi?id=2258475
- https://access.redhat.com/security/cve/CVE-2024-0562
- https://security-tracker.debian.org/tracker/CVE-2024-0562
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source