Astra Linux - уязвимость в linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: block, bfq: fixed the UAF in bfqlimitdepth Setting the newly allocated bfqq to bic or removing freed bfqq from bic is both protected by bfqd-lock. However, bfqlimitdepth dereferences bfqq from bic without the lock, which can...

CVE-2022-50329

CVE-2022-50329 affects the Linux kernel’s block/bfq subsystem. The root cause was a use-after-free: bfqq could be freed in bfq_exit_icq_bfqq() and then used in bic_set_bfqq(), leading to UAF. The fix reorders operations by moving bfq_exit_bfqq() behind bic_set_bfqq(), preventing the invalid access.