CVE-2024-38630 watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
A use-after-free bug in the Linux kernel's cpu5wdt watchdog driver allows attackers to potentially execute code or escalate privileges during module removal.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-38630?
CVE-2024-38630 is a high-severity use after free vulnerability in Linux kernel, published on 21 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
When the cpu5wdt module is removing, the origin code uses del_timer() to de-activate the timer. If the timer handler is running, del_timer() could not stop it and will return directly. If the port region is released by release_region() and then the timer handler cpu5wdt_trigger() calls outb() to write into the region that is released, the use-after-free bug will happen.
Change del_timer() to timer_shutdown_sync() in order that the timer handler could be finished before the port region is released.
Weakness: CWE-416
Which versions are affected by CVE-2024-38630?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-38630?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2024-38630 being exploited?
There is no known exploitation of CVE-2024-38630 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-48939, BELL-CVE-2024-38630, DEBIAN-CVE-2024-38630, GHSA-w952-23jq-pvh9, ROOT-OS-DEBIAN-11-CVE-2024-38630, ROOT-OS-DEBIAN-12-CVE-2024-38630 and 1 more.