Log in Start free

Vulnerability · Published May 21, 2024 · Assigned by Linux

CVE-2021-47323watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()

High 8.8

In plain English

A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 67% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.2%top 32.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.14.6-1DEBIAN-CVE-2021-47323
Debian:13linux5.14.6-1DEBIAN-CVE-2021-47323
Debian:14linux5.14.6-1DEBIAN-CVE-2021-47323
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47323
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47323
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47323

Affected products (as reported)

VendorProductVersions
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 0015581a79bbf8e521f85dddb7d3e4a66b9f51d41da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before b4565a8a2d6bffb05bfbec11399d261ec16fe3731da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 2aef07017fae21c3d8acea9656b10e3b9c0f1e041da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 522e75ed63f67e815d4ec0deace67df22d9ce78e1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 7c56c5508dc20a6b133bc669fc34327a6711c24c1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before a173e3b62cf6dd3c4a0a10c8a82eedfcae81a5661da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before b3c41ea5bc34d8c7b19e230d80e0e555c6f5057d1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before f0feab82f6a0323f54d85e8b512a2be64f83648a
Linux Linux 2.6.12

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References