CVE-2023-52983

Summary

In the Linux kernel, the following vulnerability has been resolved:

block, bfq: fix uaf for bfqq in bic_set_bfqq()

After commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'"), bic->bfqq will be accessed in bic_set_bfqq(), however, in some context bic->bfqq will be freed, and bic_set_bfqq() is called with the freed bic->bfqq.

Fix the problem by always freeing bfqq after bic_set_bfqq().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5533742c7cb1bc9b1f0bf401cc397d44a3a9e07a < 7f77f3dab5066a7c9da73d72d1eee895ff84a8d5affected
LinuxLinux094f3d9314d67691cb21ba091c1b528f6e3c4893 < 511c922c5bf6c8a166bea826e702336bc2424140affected
LinuxLinux761564d93c8265f65543acf0a576b32d66bfa26a < cb1876fc33af26d00efdd473311f1b664c77c44eaffected
LinuxLinux64dc8c732f5c2b406cc752e6aaa1bd5471159cab < b600de2d7d3a16f9007fad1bdae82a3951a26af2affected
LinuxLinuxb22fd72bfebda3956efc4431b60ddfc0a51e03e0affected
LinuxLinux6.0.16 < 6.1affected
LinuxLinux5.15.86 < 5.15.93affected
LinuxLinux6.1.2 < 6.1.11affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References