In the Linux kernel, the following vulnerability has been resolved:
block, bfq: fix uaf for bfqq in bic_set_bfqq()
After commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'"), bic->bfqq will be accessed in bic_set_bfqq(), however, in some context bic->bfqq will be freed, and bic_set_bfqq() is called with the freed bic->bfqq.
Fix the problem by always freeing bfqq after bic_set_bfqq().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel | Apr 25, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfo | Apr 30, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-azure-fdeUpgrade linux-intel-iotgUpgrade linux-gkeUpgrade linuxUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-awsUpgrade linux-azureUpgrade linux-gcpUpgrade linux-gcp-5.15 | Apr 1, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub