PT-2022-7236 · Linux+1 · Linux Kernel+1
Rohit Keshri
·
Published
2022-08-28
·
Updated
2024-08-27
·
CVE-2024-0562
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A use-after-free flaw was found in the Linux Kernel. When a disk is removed,
bdi unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb inode writeback end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi writeback. This issue is related to the wb inode writeback end() function in the mm/page-writeback.c module of the kernel's memory management subsystem. The exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel