The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
watchdog: Fix possible use-after-free by calling del_timer_sync()
This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvm | Sep 26, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-ec2Upgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-64kbUpgrade kernel-trace-baseUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-xen-develUpgrade kernel-zfcpdump | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-gcpUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-fips | Nov 19, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub