CVE-2024-49854

block, bfq: fix uaf for accessing waker_bfqq after splitting

References

Notes

 carnil> Introduced in 42c306ed7233 ("block, bfq: don't break merge chain in
 carnil> bfq_split_bfqq()"). Vulnerable versions: 5.10.227 5.15.168 6.1.113 6.6.54
 carnil> 6.10.13 6.11.2 6.12-rc1.

Bugs

Status

Branch Status
upstream N/A "Vulnerable code not present"
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.11-upstream-stable released (6.11.2) [cae58d19121a70329cf971359e2518c93fec04fe]
6.10-upstream-stable released (6.10.13) [0b8bda0ff17156cd3f60944527c9d8c9f99f1583]
6.6-upstream-stable N/A "Vulnerable code not present"
6.1-upstream-stable N/A "Vulnerable code not present"
5.10-upstream-stable needed
4.19-upstream-stable N/A "Vulnerable code not present"
sid N/A "Vulnerable code not present"
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security N/A "Vulnerable code not present"
5.10-bullseye-security needed