In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/cmu-pasta/linux-kernel-enriched-corpus