CVE-2022-50488

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0-60.18.0.50.h602

Description The Linux kernel contains a use-after-free issue within the block, bfq (Best Effort Queue) subsystem. Specifically, the issue relates to the bfqq->bic pointer. A scenario involving process migration between cgroups can lead to a situation where the bfqq and bic structures point to the same memory location, and the bic structure may be freed while still being referenced by the bfqq, resulting in a use-after-free condition. This can occur when a process moves to a new cgroup and issues new I/O requests before the previous I/O requests are completed.

Recommendations Update to Linux kernel version 5.10.0-60.18.0.50.h602 or a later version to address this issue.