Use-after-free vulnerability in sc520_wdt watchdog driver
Summary
GSD-2021-1001328: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff(). Affects Kernel versions < 7c56c5508dc20a6b133bc669fc34327a6711c24c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sc520_wdt is a watchdog driver in the Linux Kernel that provides support for the SC520 family of embedded processors. The watchdog timer is responsible for monitoring the system and resetting it if necessary. The sc520_wdt driver is used to control the watchdog timer on systems using the National Semiconductor SC520 processor. This vulnerability affects the sc520_wdt driver and can lead to a use-after-free condition.
Vulnerability Detail
The use-after-free vulnerability in the sc520_wdt driver occurs in the wdt_turnoff() function. This function is responsible for turning off the watchdog timer. However, due to a programming error, there is a possibility of a use-after-free condition. An attacker could exploit this vulnerability by triggering the wdt_turnoff() function at a specific time, causing the use-after-free condition. This could potentially lead to a system crash or allow the attacker to execute arbitrary code with kernel privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Conclusion
The use-after-free vulnerability in the sc520_wdt driver can be fixed by updating the Linux Kernel to version v5.4.134 or later. It is important to regularly update the Linux Kernel to ensure the latest security patches are applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The sc520_wdt driver is a watchdog driver in the Linux Kernel that provides support for the SC520 family of embedded processors. It controls the watchdog timer on systems using the National Semiconductor SC520 processor.
A use-after-free vulnerability occurs when a program continues to use a memory address after it has been freed. This can lead to crashes, memory corruption, or the execution of arbitrary code.
This vulnerability could potentially lead to a system crash or allow an attacker to execute arbitrary code with kernel privileges.
To fix this vulnerability, update your Linux Kernel to version v5.4.134 or later.
There is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
