In the Linux kernel, the following vulnerability has been resolved:
watchdog: Fix possible use-after-free by calling del_timer_sync()
This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extra | Sep 26, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade perf-debuginfo | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-ec2-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-traceUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-trace-develUpgrade kernel-zfcpdumpUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-xen-develUpgrade kernel-ec2-baseUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-xenUpgrade kernel-64kb-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fde-5.15Upgrade linux-hweUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-fipsUpgrade linux-azure-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub