CVE-2021-47323: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
In the Linux kernel, the following vulnerability has been resolved:
watchdog: sc520wdt: Fix possible use-after-free in wdtturnoff()
This module's remove path calls deltimer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling deltimersync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47323?
CVE-2021-47323 has a severity rating of medium due to the potential for a use-after-free vulnerability in the Linux kernel's watchdog module.
How do I fix CVE-2021-47323?
To fix CVE-2021-47323, users should update to the latest version of the Linux kernel where the vulnerability has been resolved.
What software is affected by CVE-2021-47323?
CVE-2021-47323 affects the Linux kernel, specifically the watchdog: sc520_wdt module.
What are the potential impacts of CVE-2021-47323?
If exploited, CVE-2021-47323 could lead to a denial of service or potentially other consequences due to improper handling of timer operations.
When was CVE-2021-47323 announced?
CVE-2021-47323 was announced in late 2021 as part of ongoing security updates for the Linux kernel.