Riskcovery

CVE-2024-38630

watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger

State
Published
Severity
Not scored
Published
Jun 21, 2024
Updated
Oct 30, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger

When the cpu5wdt module is removing, the origin code uses del_timer() to de-activate the timer. If the timer handler is running, del_timer() could not stop it and will return directly. If the port region is released by release_region() and then the timer handler cpu5wdt_trigger() calls outb() to write into the region that is released, the use-after-free bug will happen.

Change del_timer() to timer_shutdown_sync() in order that the timer handler could be finished before the port region is released.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 948ed659c0151a605bd126da1e95f350ec5a7956Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9abe50e8492d1accd7d8dc17991179472d3d4573Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b1c063ffc075abf56f63e55d70b9778ff534314Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f19686d616500cd0d47b30cee82392b53f7f784aAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 573601521277119f2e2ba5f28ae6e87fc594f4d4Affected
LinuxLinux
  • 2.6.12Affected
  • before 2.6.12Not affected
  • 5.15.224 through 5.15.*Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.9.4 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.