Use-after-free vulnerability in sc520_wdt module in Linux Kernel
Summary
GSD-2021-1001415: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff(). Affects Kernel versions < 2aef07017fae21c3d8acea9656b10e3b9c0f1e04. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sc520_wdt module is a watchdog timer driver in the Linux Kernel. It is responsible for monitoring the system and triggering a reboot if necessary. The sc520_wdt module specifically handles the watchdog timer functionality for the National Semiconductor SC520 processor. This vulnerability affects the sc520_wdt module and can lead to a use-after-free condition.
Vulnerability Detail
The use-after-free vulnerability in the sc520_wdt module occurs in the wdt_turnoff() function. This function is responsible for turning off the watchdog timer. However, due to a programming error, there is a possibility of accessing freed memory after it has been released. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The use-after-free vulnerability in the sc520_wdt module of the Linux Kernel can potentially lead to security issues. It is recommended to update the Linux Kernel to the fixed version or apply the relevant patch. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The sc520_wdt module is a watchdog timer driver in the Linux Kernel. It is responsible for monitoring the system and triggering a reboot if necessary.
A use-after-free vulnerability occurs when a program continues to use a memory area after it has been freed. This can lead to various security issues, including the execution of arbitrary code or a denial-of-service condition.
The impact of this vulnerability is not yet proven. However, if successfully exploited, an attacker could execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, update your Linux Kernel to version v4.14.240 or apply the relevant patch.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
