CVE-2024-38630
Published: Jun 21, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger When the cpu5wdt module is removing, the origin code uses del_timer() to de-activate the timer. If the timer handler is running, del_timer() could not stop it and will return directly. If the port region is released by release_region() and then the timer handler cpu5wdt_trigger() calls outb() to write into the region that is released, the use-after-free bug will happen. Change del_timer() to timer_shutdown_sync() in order that the timer handler could be finished before the port region is released.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 9b1c063ffc075abf56f63e55d70b9778ff534314affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < f19686d616500cd0d47b30cee82392b53f7f784aaffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 573601521277119f2e2ba5f28ae6e87fc594f4d4 |
Linux | Linux | affected 2.6.12unaffected 0 - < 2.6.12unaffected 6.6.33 - <= 6.6.*unaffected 6.9.4 - <= 6.9.*unaffected 6.10 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now