A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.
CVE-2024-0562
CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-416
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
linux linux kernel
redhat enterprise linux
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Third Party Advisory
- patchwork.kernel.org Mailing List, Patch
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Third Party Advisory
- patchwork.kernel.org Mailing List, Patch