high 7.8

CVE-2024-0562 json

Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c

published 2024-01-15 2 y ago modified 2026-11-05 4 d ago also EUVD-2024-16355

cvss: 7.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 17%
public exploits: 0; none known

A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback.

Patch / fix

fixed in 2 distros 4 links 1

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support 0:4.18.0-372.87.1.el8_6
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 0:4.18.0-372.87.1.el8_6

debian ubuntu red hat azure linux

linux Debian 14, Debian 13, Debian 12 5.19.6-1

debian advisories DEBIAN-CVE-2024-0562

linux Ubuntu 22.04 LTS 5.15.0-53.59
linux-aws Ubuntu 22.04 LTS 5.15.0-1023.27
linux-gcp Ubuntu 22.04 LTS 5.15.0-1022.29
linux-gke Ubuntu 22.04 LTS 5.15.0-1020.25
linux-ibm Ubuntu 22.04 LTS 5.15.0-1018.21
linux-kvm Ubuntu 22.04 LTS 5.15.0-1021.26
linux-azure Ubuntu 22.04 LTS 5.15.0-1023.29
linux-gkeop Ubuntu 22.04 LTS 5.15.0-1008.12

ubuntu advisories UBUNTU-CVE-2024-0562

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

perf rhev hypervisor 4.4, RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
kernel RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
bpftool RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
kernel-core RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
kernel-tools RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
python3-perf RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
kernel-modules RHEL 8.6 EUS 4.18.0-372.87.1.el8_6
kernel-zfcpdump RHEL 8.6 EUS 4.18.0-372.87.1.el8_6

red hat advisories RHSA-2024:0412

kernel CBL-Mariner 2.0 5.15.153.1-1

azure linux advisories AZL-33599

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

patchwork.kernel.org/project/linux-mm/patch/20220801155034.3772543-1-khazhy@goo… patch

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-0562 updated 2026-11-05 cvss 7.8

kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c

Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-core, kernel-tools, python3-perf, +17 more
affected: workaround, no fix available
Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-debuginfo-common-x86_64 4.18.0-372.87.1.el8_6, kernel-debuginfo-common-aarch64 4.18.0-372.87.1.el8_6, kernel-debuginfo-common-ppc64le 4.18.0-372.87.1.el8_6 Red Hat Enterprise Linux BaseOS EUS (v.8.6) perf 4.18.0-372.87.1.el8_6, kernel 4.18.0-372.87.1.el8_6, bpftool 4.18.0-372.87.1.el8_6, kernel-core 4.18.0-372.87.1.el8_6, kernel-tools 4.18.0-372.87.1.el8_6, python3-perf 4.18.0-372.87.1.el8_6, +15 more Red Hat Virtualization 4 Hypervisor for RHEL 8 perf 4.18.0-372.87.1.el8_6, kernel-debuginfo-common-x86_64 4.18.0-372.87.1.el8_6
fixed: vendor fix RHSA-2024:0412
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 kernel-rt, kernel-rt-kvm, kernel-rt-core, kernel-rt-modules, kernel-rt-debug-kvm, kernel-rt-debug-core, +6 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-01-16)

Exploit prediction

0.25% chance of exploitation in the next 30 days, higher than 17% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8
Red Hat Red Hat Enterprise Linux 9

Classification

Weakness

CWE-416 Use After Free

Technology feeds

Linux kernel rss critical rss

References

patchwork.kernel.org /project/linux-mm/patch/20220801155034.3772543-1-khazhy@google.com/
mailing-list, patch
access.redhat.com /errata/RHSA-2024:0412
vendor-advisory, third-party-advisory
access.redhat.com /security/cve/CVE-2024-0562
vdb-entry, third-party-advisory
bugzilla.redhat.com /show_bug.cgi?id=2258475
issue-tracking, third-party-advisory

Sources

CVE List CVE-2024-0562
NVD CVE-2024-0562

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary