Threats tagged 'ghsa-8qj8-qf9j-579x'

CVE-2024-49854 is a use-after-free (UAF) vulnerability in the Linux kernel's block layer BFQ scheduler. The flaw occurs after a specific commit changed how BFQ queue splitting is handled, potentially allowing access to freed memory when accessing the waker_bfqq pointer. This can lead to high-impact consequences including confidentiality, integrity, and availability violations. The issue is fixed by adding a helper function to safely check references before access.