{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-49854",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-49854",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-10-21T12:18:46.723Z",
    "updatedAt": "2026-08-05T11:40:04.538Z",
    "importedAt": "2026-10-24T01:57:16.009Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "block, bfq: fix uaf for accessing waker_bfqq after splitting",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix uaf for accessing waker_bfqq after splitting\n\nAfter commit 42c306ed7233 (\"block, bfq: don't break merge chain in\nbfq_split_bfqq()\"), if the current procress is the last holder of bfqq,\nthe bfqq can be freed after bfq_split_bfqq(). Hence recored the bfqq and\nthen access bfqq->waker_bfqq may trigger UAF. What's more, the waker_bfqq\nmay in the merge chain of bfqq, hence just recored waker_bfqq is still\nnot safe.\n\nFix the problem by adding a helper bfq_waker_bfqq() to check if\nbfqq->waker_bfqq is in the merge chain, and current procress is the only\nholder.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "e0c20d88b7dce85d2703bb6ba77bf359959675cd",
              "status": "affected",
              "versionType": "git",
              "lessThan": "63a07379fdb6c72450cb05294461c6016b8b7726"
            },
            {
              "version": "de6c5e3a456019d2182e345730e59721714fa0b5",
              "status": "affected",
              "versionType": "git",
              "lessThan": "de0456460f2abf921e356ed2bd8da87a376680bd"
            },
            {
              "version": "19f3bec2ac4be329b9bd12b18a989b867618d2d8",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0780451f03bf518bc032a7c584de8f92e2d39d7f"
            },
            {
              "version": "13b3d0e8cb121f99b11918a0d4bcc1ce4647d352",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0b8bda0ff17156cd3f60944527c9d8c9f99f1583"
            },
            {
              "version": "4780f50ea50cfe8e89fc3747bf3dd155488433bb",
              "status": "affected",
              "versionType": "git",
              "lessThan": "cae58d19121a70329cf971359e2518c93fec04fe"
            },
            {
              "version": "42c306ed723321af4003b2a41bb73728cab54f85",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1ba0403ac6447f2d63914fb760c44a3b19c44eaf"
            },
            {
              "version": "9e813033594b141f61ff0ef0cfaaef292564b041",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "3a5f45a4ad4e1fd36b0a998eef03d76a4f02a2a8",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "3630a18846c7853aa326d3b42fd0a855af7b41bc",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "4.19.323",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.20"
            },
            {
              "version": "5.4.285",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.5"
            },
            {
              "version": "5.10.227",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.11"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": []
        }
      ]
    }
  }
}