EUVD-2024-53320

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-56672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy puttin...

CVE-2024-56672 blk-cgroup: Fix UAF in blkcg_unpin_online()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcgparentblkcg but it was calling that after blkcgdestroyblkgsblkcg which could free the blkcg,...

CVE-2024-56672

CVE-2024-56672 affects the Linux kernel blk-cgroup component. The issue is a use-after-free (UAF) in blkcg_unpin_online() where blkcg_parent(blkcg) is read after blkcg_destroy_blkgs(blkcg) could free the blkcg. The fix reads the parent pointer before destroying the blkcg’s blkg’s, preventing UAF....