CVE-2023-52983
block, bfq: fix uaf for bfqq in bic_set_bfqq()
Résumé
block, bfq: fix uaf for bfqq in bic_set_bfqq()
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In the Linux kernel, the following vulnerability has been resolved:
block, bfq: fix uaf for bfqq in bic_set_bfqq()
After commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'"),
bic->bfqq will be accessed in bic_set_bfqq(), however, in some context
bic->bfqq will be freed, and bic_set_bfqq() is called with the freed
bic->bfqq.
Fix the problem by always freeing bfqq after bic_set_bfqq().
Paquets affectés
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"5.15.86"},{"fixed":"5.15.93"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.1.2"},{"fixed":"6.1.11"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-52983 linux Corrigé dans: 5.10.178-1
- Ubuntu UBUNTU-CVE-2023-52983 linux-hwe-edge
Références
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org