Use-after-free vulnerability in watchdog package
Summary
GSD-2021-1001329: watchdog: Fix possible use-after-free in wdt_startup(). Affects Kernel versions < 146cc288fb80c662c9c35e7bc58325d1ac0a7875. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The watchdog package is a component of the Linux Kernel that provides a mechanism for monitoring the system and triggering a system reset if necessary. It is responsible for detecting and recovering from system malfunctions or failures. The vulnerability identified in the watchdog package is a use-after-free issue, which occurs when a program continues to use a pointer after the memory it points to has been freed. This can lead to unpredictable behavior and potential security risks.
Vulnerability Detail
The use-after-free vulnerability in the watchdog package, specifically in the wdt_startup() function, allows an attacker to potentially exploit the freed memory and execute arbitrary code or cause a denial-of-service condition. By carefully manipulating the system, an attacker may be able to gain unauthorized access, escalate privileges, or disrupt the normal operation of the system. The vulnerability has been fixed in the Linux Kernel version v5.4.134 by commit 146cc288fb80c662c9c35e7bc58325d1ac0a7875.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The use-after-free vulnerability in the watchdog package can pose significant security risks and should be addressed promptly. It is recommended to update the Linux Kernel to the patched version to mitigate the vulnerability. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed. This can lead to unpredictable behavior and potential security risks.
The use-after-free vulnerability in the watchdog package can potentially allow an attacker to execute arbitrary code, gain unauthorized access, escalate privileges, or cause a denial-of-service condition.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.134 or later.
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
For more details about this vulnerability, you can refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
