CVE-2024-47706 block bfq: fix possible UAF for bfqq->bic with merge chain

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address UAF Vulnerabilities in BFQ Implementation Three CVEs have been published addressing use-after-free (UAF) vulnerabilities in the BFQ (Budget Fair Queueing) implementation. CVE-2024-49854 and CVE-2024-47706 were published on October 21, 2024, while CVE-2025-21631 was published on January 19, 2025. These vulnerabilities could potentially affect systems utilizing the BFQ scheduler. 4 sources 39