CVE-2024-0562
Assigner: redhat
Published: 2024-01-15T19:01:36.947Z
State: PUBLISHED
title: Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
metrics: other: content: value: Moderate
namespace: https://access.redhat.com/security/updates/classification/
type: Red Hat severity rating
cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
descriptions: value: A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.
affected: versions: status: affected
version: 0
lessThan: 6.0-rc3
versionType: semver
packageName: kernel
collectionURL: https://git.kernel.org/pub/scm/linux/kernel
defaultStatus: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Extended Update Support
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: affected
versions: version: 0:4.18.0-372.87.1.el8_6
lessThan: *
versionType: rpm
status: unaffected
cpes: cpe:/o:redhat:rhev_hypervisor:4.4::el8
cpe:/a:redhat:rhel_eus:8.6::crb
cpe:/o:redhat:rhel_eus:8.6::baseos
vendor: Red Hat
product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: affected
versions: version: 0:4.18.0-372.87.1.el8_6
lessThan: *
versionType: rpm
status: unaffected
cpes: cpe:/o:redhat:rhev_hypervisor:4.4::el8
cpe:/a:redhat:rhel_eus:8.6::crb
cpe:/o:redhat:rhel_eus:8.6::baseos
vendor: Red Hat
product: Red Hat Enterprise Linux 6
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:6
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:7
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel-rt
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:7
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:8
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel-rt
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:8
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:9
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel-rt
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:9
datePublic: 2023-03-10T00:00:00+00:00
problemTypes: descriptions: cweId: CWE-416
description: Use After Free
type: CWE
x_redhatCweChain: CWE-416: Use After Free
workarounds: value: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
timeline: time: 2024-01-15T00:00:00+00:00
value: Reported to Red Hat.
time: 2023-03-10T00:00:00+00:00
value: Made public.