Li Jinlin

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.18.0-147 **Description** A use-after-free vulnerability has been resolved in the Linux kernel. The issue occurred in the blk-cgroup component, where a use-after-free report was generated by KASAN during a fuzz test. The vulnerability was caused by the lack of a blkcg lock when destroying a blkg pd. The affected function is `bfq io set weight legacy+0xd3/0x160`. **Recommendations** To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, update to a version later than 4.18.0-147. Note: The provided information does not include details about the fixed version or specific patch, so a general recommendation to update the kernel is given.