CVE-2024-38630

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38630
In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger When the cpu5wdt module is removing, the origin code uses del_timer() to de-activate the timer. If the timer handler is running, del_timer() could not stop it and will return directly. If the port region is released by release_region() and then the timer handler cpu5wdt_trigger() calls outb() to write into the region that is released, the use-after-free bug will happen. Change del_timer() to timer_shutdown_sync() in order that the timer handler could be finished before the port region is released.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/573601521277119f2e2ba5f28ae6e87fc594f4d4 Patch
https://git.kernel.org/stable/c/9b1c063ffc075abf56f63e55d70b9778ff534314 Patch
https://git.kernel.org/stable/c/f19686d616500cd0d47b30cee82392b53f7f784a Patch
https://git.kernel.org/stable/c/573601521277119f2e2ba5f28ae6e87fc594f4d4 Patch
https://git.kernel.org/stable/c/9b1c063ffc075abf56f63e55d70b9778ff534314 Patch
https://git.kernel.org/stable/c/f19686d616500cd0d47b30cee82392b53f7f784a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/573601521277119f2e2ba5f28ae6e87fc594f4d4 - Patch () https://git.kernel.org/stable/c/573601521277119f2e2ba5f28ae6e87fc594f4d4 - Patch
References () https://git.kernel.org/stable/c/9b1c063ffc075abf56f63e55d70b9778ff534314 - Patch () https://git.kernel.org/stable/c/9b1c063ffc075abf56f63e55d70b9778ff534314 - Patch
References () https://git.kernel.org/stable/c/f19686d616500cd0d47b30cee82392b53f7f784a - Patch () https://git.kernel.org/stable/c/f19686d616500cd0d47b30cee82392b53f7f784a - Patch

09 Sep 2024, 13:43

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: watchdog: cpu5wdt.c: corrige el error de use-after-free causado por cpu5wdt_trigger Cuando se elimina el módulo cpu5wdt, el código de origen usa del_timer() para desactivar el temporizador. Si el controlador del temporizador se está ejecutando, del_timer() no pudo detenerlo y regresará directamente. Si la región del puerto es liberada por release_region() y luego el controlador del temporizador cpu5wdt_trigger() llama a outb() para escribir en la región que se libera, se producirá el error de use-after-free. Cambie del_timer() a timer_shutdown_sync() para que el controlador del temporizador pueda finalizar antes de que se libere la región del puerto.
CWE CWE-416
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/573601521277119f2e2ba5f28ae6e87fc594f4d4 - () https://git.kernel.org/stable/c/573601521277119f2e2ba5f28ae6e87fc594f4d4 - Patch
References () https://git.kernel.org/stable/c/9b1c063ffc075abf56f63e55d70b9778ff534314 - () https://git.kernel.org/stable/c/9b1c063ffc075abf56f63e55d70b9778ff534314 - Patch
References () https://git.kernel.org/stable/c/f19686d616500cd0d47b30cee82392b53f7f784a - () https://git.kernel.org/stable/c/f19686d616500cd0d47b30cee82392b53f7f784a - Patch

21 Jun 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-21 11:15

Updated : 2024-11-21 09:26

NVD link : CVE-2024-38630

Mitre link : CVE-2024-38630

CVE.ORG link : CVE-2024-38630

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free