AZL-33599
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-33599.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-33599
- Upstream
- Published
- 2024-01-15T19:15:08Z
- Modified
- 2026-04-01T05:11:13.428017Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2024-0562 affecting package kernel for versions less than 5.15.153.1-1
- Details
-
A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdiunregister is called to stop further write-back and waits for associated delayed work to complete. However, wbinodewritebackend() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.
- References