In the Linux kernel, the following vulnerability has been resolved:
watchdog: Fix possible use-after-free by calling del_timer_sync()
This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel | Sep 26, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-modules | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-develUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-ec2-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-azureUpgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-gkeopUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-azure-fde-5.15Upgrade linux-hwe | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub