CVE-2024-53166

The CVE-2024-53166 entry concerns a Linux kernel bfq UAF in block/bfq. Root cause: bfq_limit_depth() dereferences bfqq loaded from bic without holding bfqd->lock, enabling a use-after-free when io_context is shared by multiple tasks (e.g., io_uring). Astra Linux security bulletin confirms a fi...