CVE-2024-49854
block, bfq: fix uaf for accessing waker_bfqq after splitting
References
Notes
carnil> Introduced in 42c306ed7233 ("block, bfq: don't break merge chain in
carnil> bfq_split_bfqq()"). Vulnerable versions: 5.10.227 5.15.168 6.1.113 6.6.54
carnil> 6.10.13 6.11.2 6.12-rc1.
Bugs
Status
| Branch |
Status |
| upstream |
N/A "Vulnerable code not present"
|
| 6.18-upstream-stable |
N/A "Fixed before branching point"
|
| 6.17-upstream-stable |
N/A "Fixed before branching point"
|
| 6.12-upstream-stable |
N/A "Fixed before branching point"
|
| 6.11-upstream-stable |
released (6.11.2) [cae58d19121a70329cf971359e2518c93fec04fe]
|
| 6.10-upstream-stable |
released (6.10.13) [0b8bda0ff17156cd3f60944527c9d8c9f99f1583]
|
| 6.6-upstream-stable |
N/A "Vulnerable code not present"
|
| 6.1-upstream-stable |
N/A "Vulnerable code not present"
|
| 5.10-upstream-stable |
needed
|
| 4.19-upstream-stable |
N/A "Vulnerable code not present"
|
| sid |
N/A "Vulnerable code not present"
|
| 6.12-trixie-security |
N/A "Fixed before branching point"
|
| 6.1-bookworm-security |
N/A "Vulnerable code not present"
|
| 5.10-bullseye-security |
needed
|