Use-after-free vulnerability in sc520_wdt module of Kernel
Summary
UVI-2021-1001268: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff(). Affects Kernel versions < a173e3b62cf6dd3c4a0a10c8a82eedfcae81a566. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The sc520_wdt module is a watchdog timer driver used for monitoring system activity and ensuring its stability. However, a use-after-free vulnerability has been identified in the wdt_turnoff() function of the sc520_wdt module.
Vulnerability Detail
The use-after-free vulnerability in the wdt_turnoff() function of the sc520_wdt module allows an attacker to exploit a freed memory region, potentially leading to arbitrary code execution or a system crash. This vulnerability can be triggered by a specific sequence of operations, causing the system to use memory that has already been deallocated. An attacker with local access to the system may be able to exploit this vulnerability to gain elevated privileges or disrupt the system's normal operation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official patch or update the Kernel to the fixed version to mitigate the risk.
Conclusion
The use-after-free vulnerability in the sc520_wdt module of the Kernel can be a serious security risk, potentially leading to arbitrary code execution or system crashes. It is crucial to update the Kernel to the fixed version or apply the official patch to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially allow an attacker to execute arbitrary code or crash the system, leading to a denial of service or privilege escalation.
Any system running the affected version of the Linux Kernel with the sc520_wdt module enabled is vulnerable to this issue.
No, this vulnerability requires local access to the system to be exploited.
There is no known evidence of this vulnerability being exploited in real-world attacks at the time of this report.
Unfortunately, there are no known mitigations or workarounds available for this vulnerability other than updating the Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
