8.8
High
CVE-2021-47324 In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in…
Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdt_startup() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 5.14 | earliest → < 5.14 | 5.14 |
| Linux 5.13 | earliest → < 5.13.4 | 5.13.4 |
| Linux 5.12 | earliest → < 5.12.19 | 5.12.19 |
| Linux 5.10 | earliest → < 5.10.52 | 5.10.52 |
| Linux 5.4 | earliest → < 5.4.134 | 5.4.134 |
| Linux 4.19 | earliest → < 4.19.198 | 4.19.198 |
| Linux 4.14 | earliest → < 4.14.240 | 4.14.240 |
| Linux 4.9 | earliest → < 4.9.276 | 4.9.276 |
| Linux 4.4 | earliest → < 4.4.276 | 4.4.276 |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux | 2.6.12 | No fix stated |
| linux_kernel | Versions not published |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated