Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfqlimitdepth Setting a new allocated bfqq to bic or removing a freed bfqq from bic are both protected by bfqd-lock; however, bfqlimitdepth deferences bfqq from bic without the lock, which can lead to ...

CVE-2022-50329

CVE-2022-50329 affects the Linux kernel’s block/bfq subsystem. The root cause was a use-after-free: bfqq could be freed in bfq_exit_icq_bfqq() and then used in bic_set_bfqq(), leading to UAF. The fix reorders operations by moving bfq_exit_bfqq() behind bic_set_bfqq(), preventing the invalid access.