{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2021-47324", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T14:28:16.974Z", "datePublished": "2024-05-21T14:35:37.844Z", "dateUpdated": "2024-08-04T05:32:08.602Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:06:00.181Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: Fix possible use-after-free in wdt_startup()\n\nThis module's remove path calls del_timer(). However, that function\ndoes not wait until the timer handler finishes. This means that the\ntimer handler may still be running after the driver's remove function\nhas finished, which would result in a use-after-free.\n\nFix by calling del_timer_sync(), which makes sure the timer handler\nhas finished, and unable to re-schedule itself." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/watchdog/sbc60xxwdt.c" ], "versions": [ { "version": "1da177e4c3f4", "lessThan": "63a3dc24bd05", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "862f2b5a7c38", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "0ac50a76cf3c", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "dc9403097be5", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "146cc288fb80", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "a397cb4576fc", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "b4ebf4a4692e", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "8adbbe6c86bb", "status": "affected", "versionType": "git" }, { "version": "1da177e4c3f4", "lessThan": "c08a6b31e491", "status": "affected", "versionType": "git" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/watchdog/sbc60xxwdt.c" ], "versions": [ { "version": "4.4.276", "lessThanOrEqual": "4.4.*", "status": "unaffected", "versionType": "custom" }, { "version": "4.9.276", "lessThanOrEqual": "4.9.*", "status": "unaffected", "versionType": "custom" }, { "version": "4.14.240", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom" }, { "version": "4.19.198", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.4.134", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.10.52", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.12.19", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.13.4", "lessThanOrEqual": "5.13.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/63a3dc24bd053792f84cb4eef0168b1266202a02" }, { "url": "https://git.kernel.org/stable/c/862f2b5a7c38762ac9e369daefbf361a91aca685" }, { "url": "https://git.kernel.org/stable/c/0ac50a76cf3cd63db000648b3b19f3f98b8aaa76" }, { "url": "https://git.kernel.org/stable/c/dc9403097be52d57a5c9c35efa9be79d166a78af" }, { "url": "https://git.kernel.org/stable/c/146cc288fb80c662c9c35e7bc58325d1ac0a7875" }, { "url": "https://git.kernel.org/stable/c/a397cb4576fc2fc802562418b3a50b8f67d60d31" }, { "url": "https://git.kernel.org/stable/c/b4ebf4a4692e84163a69444c70ad515de06e2259" }, { "url": "https://git.kernel.org/stable/c/8adbbe6c86bb13e14f8a19e036ae5f4f5661fd90" }, { "url": "https://git.kernel.org/stable/c/c08a6b31e4917034f0ed0cb457c3bb209576f542" } ], "title": "watchdog: Fix possible use-after-free in wdt_startup()", "x_generator": { "engine": "bippy-a5840b7849dd" } }, "adp": [ { "problemTypes": [ { "descriptions": [ { "type": "CWE", "cweId": "CWE-416", "lang": "en", "description": "CWE-416 Use After Free" } ] } ], "affected": [ { "vendor": "linux", "product": "linux_kernel", "cpes": [ "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ], "defaultStatus": "affected", "versions": [ { "version": "0 1da177e4c3f4", "status": "affected", "lessThan": "63a3dc24bd05", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "862f2b5a7c38", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "0ac50a76cf3c", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "dc9403097be5", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "146cc288fb80", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "a397cb4576fc", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "b4ebf4a4692e", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "8adbbe6c86bb", "versionType": "git" }, { "version": "1da177e4c3f4", "status": "affected", "lessThan": "c08a6b31e491", "versionType": "git" } ] } ], "metrics": [ { "cvssV3_1": { "scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH" } }, { "other": { "type": "ssvc", "content": { "timestamp": "2024-05-21T15:44:28.798834Z", "id": "CVE-2021-47324", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-01T13:33:29.942Z" } }, { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.602Z" }, "title": "CVE Program Container", "references": [ { "url": "https://git.kernel.org/stable/c/63a3dc24bd053792f84cb4eef0168b1266202a02", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/862f2b5a7c38762ac9e369daefbf361a91aca685", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/0ac50a76cf3cd63db000648b3b19f3f98b8aaa76", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/dc9403097be52d57a5c9c35efa9be79d166a78af", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/146cc288fb80c662c9c35e7bc58325d1ac0a7875", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/a397cb4576fc2fc802562418b3a50b8f67d60d31", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/b4ebf4a4692e84163a69444c70ad515de06e2259", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/8adbbe6c86bb13e14f8a19e036ae5f4f5661fd90", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/c08a6b31e4917034f0ed0cb457c3bb209576f542", "tags": [ "x_transferred" ] } ] } ] } }