CVE-2021-47321: watchdog: Fix possible use-after-free by calling del_timer_sync()
First published: Tue May 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free by calling del_timer_sync() The Linux kernel CVE team has assigned <a href="https://access.redhat.com/security/cve/CVE-2021-47321">CVE-2021-47321</a> to this issue. Upstream advisory: <a href="https://lore.kernel.org/linux-cve-announce/2024052132-CVE-2021-47321-1b9b@gregkh/T">https://lore.kernel.org/linux-cve-announce/2024052132-CVE-2021-47321-1b9b@gregkh/T</a>
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <4.4.276 | 4.4.276 |
| redhat/kernel | <4.9.276 | 4.9.276 |
| redhat/kernel | <4.14.240 | 4.14.240 |
| redhat/kernel | <4.19.198 | 4.19.198 |
| redhat/kernel | <5.4.134 | 5.4.134 |
| redhat/kernel | <5.10.52 | 5.10.52 |
| redhat/kernel | <5.12.19 | 5.12.19 |
| redhat/kernel | <5.13.4 | 5.13.4 |
| redhat/kernel | <5.14 | 5.14 |
| Linux Kernel | <4.4.276 | |
| Linux Kernel | >=4.5<4.9.276 | |
| Linux Kernel | >=4.10<4.14.240 | |
| Linux Kernel | >=4.15<4.19.198 | |
| Linux Kernel | >=4.20<5.4.134 | |
| Linux Kernel | >=5.5<5.10.52 | |
| Linux Kernel | >=5.11<5.12.9 | |
| Linux Kernel | >=5.13<5.13.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/1a053c4d716898a53c2e31c574a70ea0c37044a3
- https://git.kernel.org/stable/c/4c05dac488a660fe2925c047ecb119e7afaaeb1e
- https://git.kernel.org/stable/c/58606882ad8ec6c39e0f40344b922921ef94ab4d
- https://git.kernel.org/stable/c/66ba9cf929b1c4fabf545bd4c18f6f64e23e46e4
- https://git.kernel.org/stable/c/8bec568d7518b1504a602ed5376bb322e4dbb270
- https://git.kernel.org/stable/c/ca96b8ea5e74956071154bdb456778cc3027e79f
- https://git.kernel.org/stable/c/d0212f095ab56672f6f36aabc605bda205e1e0bf
- https://git.kernel.org/stable/c/db222f1477ad5692cd454709b714949807e5d111
- https://git.kernel.org/stable/c/ecd620e0fb1ff7f78fdb593379b2e6938c99707a
- https://access.redhat.com/security/cve/CVE-2021-47321
- https://lore.kernel.org/linux-cve-announce/2024052132-CVE-2021-47321-1b9b@gregkh/T
- https://access.redhat.com/errata/RHSA-2024:7001
- https://access.redhat.com/errata/RHSA-2024:7000
- https://access.redhat.com/errata/RHSA-2024:8107
- https://bugzilla.redhat.com/show_bug.cgi?id=2282440
Frequently Asked Questions
What is the severity of CVE-2021-47321?
CVE-2021-47321 has been classified with high severity due to the potential for use-after-free vulnerabilities in the Linux kernel.
How do I fix CVE-2021-47321?
To fix CVE-2021-47321, upgrade your Linux kernel to versions 4.4.276, 4.9.276, 4.14.240, 4.19.198, 5.4.134, 5.10.52, 5.12.19, 5.13.4, or 5.14 or later.
What impact does CVE-2021-47321 have on system security?
The impact of CVE-2021-47321 could allow an attacker to exploit memory management flaws, potentially leading to system crashes or arbitrary code execution.
Which versions of the Linux kernel are affected by CVE-2021-47321?
CVE-2021-47321 affects multiple Linux kernel versions prior to 4.4.276, 4.9.276, 4.14.240, 4.19.198, 5.4.134, 5.10.52, 5.12.19, 5.13.4, and 5.14.
Is there a specific patch for CVE-2021-47321?
There is no specific patch; the recommended action is to upgradeto a fixed version of the kernel as listed in the mitigations.
- agent/weakness
- agent/title
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- agent/description
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-47321
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.5
- version/linux kernel/4.10
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.13