CVE Database
/

CVE-2024-38630

Back to search

CVE-2024-38630

Published: Jun 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger When the cpu5wdt module is removing, the origin code uses del_timer() to de-activate the timer. If the timer handler is running, del_timer() could not stop it and will return directly. If the port region is released by release_region() and then the timer handler cpu5wdt_trigger() calls outb() to write into the region that is released, the use-after-free bug will happen. Change del_timer() to timer_shutdown_sync() in order that the timer handler could be finished before the port region is released.

VendorProductVersions

Linux

Linux

affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 9b1c063ffc075abf56f63e55d70b9778ff534314
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < f19686d616500cd0d47b30cee82392b53f7f784a
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 573601521277119f2e2ba5f28ae6e87fc594f4d4

Linux

Linux

affected
2.6.12
unaffected
0 - < 2.6.12
unaffected
6.6.33 - <= 6.6.*
unaffected
6.9.4 - <= 6.9.*
unaffected
6.10 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now