CVE-2021-47324: watchdog: Fix possible use-after-free in wdt_startup()
In the Linux kernel, the following vulnerability has been resolved:
watchdog: Fix possible use-after-free in wdtstartup()
This module's remove path calls deltimer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling deltimersync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47324?
CVE-2021-47324 is classified as a high severity vulnerability due to its potential for exploitation in the Linux kernel.
How do I fix CVE-2021-47324?
To remediate CVE-2021-47324, users should update their Linux kernel to the latest patched version provided by their distribution.
What is the impact of CVE-2021-47324?
CVE-2021-47324 may allow an attacker to exploit a use-after-free condition, potentially leading to arbitrary code execution or system crashes.
Which versions of the Linux kernel are affected by CVE-2021-47324?
CVE-2021-47324 affects specific versions of the Linux kernel that incorporate the watchdog timer functionality, particularly prior to the fix.
Is CVE-2021-47324 publicly known?
Yes, CVE-2021-47324 is a publicly documented vulnerability that has been reported and acknowledged in the Linux community.