CVE-2023-52983
block, bfq: fix uaf for bfqq in bic_set_bfqq()
Summary
block, bfq: fix uaf for bfqq in bic_set_bfqq()
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
block, bfq: fix uaf for bfqq in bic_set_bfqq()
After commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'"),
bic->bfqq will be accessed in bic_set_bfqq(), however, in some context
bic->bfqq will be freed, and bic_set_bfqq() is called with the freed
bic->bfqq.
Fix the problem by always freeing bfqq after bic_set_bfqq().
Affected packages
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"5.15.86"},{"fixed":"5.15.93"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.1.2"},{"fixed":"6.1.11"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-52983 linux Fixed in: 5.10.178-1
- Ubuntu UBUNTU-CVE-2023-52983 linux-hwe-edge
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org