In the Linux kernel, the following vulnerability has been resolved:
watchdog: Fix possible use-after-free by calling del_timer_sync()
This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernelUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules | Sep 26, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfo | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-ec2-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-source-azureUpgrade kernel-default-man | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-azure-4.15Upgrade linux-aws-hweUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-azure | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub