01 Record

CVE-2024-49854

block, bfq: fix uaf for accessing waker_bfqq after splitting

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

block, bfq: fix uaf for accessing waker_bfqq after splitting

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.21% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 11.8% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-21 12:18Z2 YR AGO

Last updated

2026-08-05 11:40Z2 MO AGO

Reserved

2024-10-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

5feb025727453d5c79cf2d805425ba31d1e273a9fac5d3b9c7f37cd515317a14

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe0c20d88b7dce85d2703bb6ba77bf359959675cd to < 63a07379fdb6c72450cb05294461c6016b8b7726, de6c5e3a456019d2182e345730e59721714fa0b5 to < de0456460f2abf921e356ed2bd8da87a376680bd, 19f3bec2ac4be329b9bd12b18a989b867618d2d8 to < 0780451f03bf518bc032a7c584de8f92e2d39d7f, 13b3d0e8cb121f99b11918a0d4bcc1ce4647d352 to < 0b8bda0ff17156cd3f60944527c9d8c9f99f1583, 4780f50ea50cfe8e89fc3747bf3dd155488433bb to < cae58d19121a70329cf971359e2518c93fec04fe, 42c306ed723321af4003b2a41bb73728cab54f85 to < 1ba0403ac6447f2d63914fb760c44a3b19c44eaf, 9e813033594b141f61ff0ef0cfaaef292564b041, 3a5f45a4ad4e1fd36b0a998eef03d76a4f02a2a8, 3630a18846c7853aa326d3b42fd0a855af7b41bc, 4.19.323 to < 4.20, 5.4.285 to < 5.5, 5.10.227 to < 5.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/63a07379fdb6c72450cb05294461c6016b8b7726
git.kernel.orghttps://git.kernel.org/stable/c/de0456460f2abf921e356ed2bd8da87a376680bd
git.kernel.orghttps://git.kernel.org/stable/c/0780451f03bf518bc032a7c584de8f92e2d39d7f
git.kernel.orghttps://git.kernel.org/stable/c/0b8bda0ff17156cd3f60944527c9d8c9f99f1583
git.kernel.orghttps://git.kernel.org/stable/c/cae58d19121a70329cf971359e2518c93fec04fe
git.kernel.orghttps://git.kernel.org/stable/c/1ba0403ac6447f2d63914fb760c44a3b19c44eaf
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html