Use-after-free vulnerability in sc520_wdt watchdog driver in Linux Kernel
Summary
GSD-2021-1001449: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff(). Affects Kernel versions < b4565a8a2d6bffb05bfbec11399d261ec16fe373. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sc520_wdt watchdog driver is a component of the Linux Kernel that provides support for the SC520 microcontroller watchdog timer. This driver allows the system to monitor and reset the watchdog timer to prevent system crashes or lock-ups. The sc520_wdt driver is responsible for controlling the behavior of the watchdog timer and ensuring its proper functioning.
Vulnerability Detail
The sc520_wdt watchdog driver in the Linux Kernel is affected by a use-after-free vulnerability in the wdt_turnoff() function. This vulnerability could be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. The use-after-free vulnerability occurs when the driver attempts to access memory that has already been freed, leading to unpredictable behavior and potential security risks. This vulnerability has been assigned the ID GSD-2021-1001449 and has been fixed in Linux Kernel version v4.9.276 by commit b4565a8a2d6bffb05bfbec11399d261ec16fe373.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is strongly advised to apply the official patch or update the Linux Kernel to the fixed version as soon as possible.
Conclusion
The sc520_wdt watchdog driver in the Linux Kernel is affected by a use-after-free vulnerability in the wdt_turnoff() function. This vulnerability could be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. It is crucial to update the Linux Kernel to version v4.9.276 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
A use-after-free vulnerability occurs when a program or driver attempts to access memory that has already been freed. This can lead to unpredictable behavior and potential security risks.
This vulnerability in the sc520_wdt watchdog driver could be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition.
You can use the Vulert playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, the vulnerability has been fixed in Linux Kernel version v4.9.276 by commit b4565a8a2d6bffb05bfbec11399d261ec16fe373. It is recommended to update the Linux Kernel to this version or later to mitigate the vulnerability.
There is no known workaround for this vulnerability. It is strongly advised to apply the official patch or update the Linux Kernel to the fixed version as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
