Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchdog timer from its callback. timer_delete() neither waits for a running callback nor prevents it from rearming the timer, so probe failure or driver removal can leave the timer accessing the devm-allocated at91wdt after it has been freed. Use timer_shutdown_sync() on both teardown paths. It waits for a running callback and rejects any attempt by the callback to rearm the timer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5161b31dc39a6d6dadc95f298de48a725b73ada8 to < f96c18a766477e5f33d51697963a5c8aed260daeaffected5161b31dc39a6d6dadc95f298de48a725b73ada8 to < a9e0efcb1125e6b452c648671f15920c4955b681affected5161b31dc39a6d6dadc95f298de48a725b73ada8 to < 1beb4dd6a30dea699e98990dd61f892ed1c0985eaffected5161b31dc39a6d6dadc95f298de48a725b73ada8 to < 29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eedaffected5161b31dc39a6d6dadc95f298de48a725b73ada8 to < b7949b0a7d998013b7ec8617a0ef5b07cca80be4affected5161b31dc39a6d6dadc95f298de48a725b73ada8 to < 8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783affected
Linux Linux
Default version status: affected
3.14affected0 to < 3.14unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.45 to ≤ 6.18.*unaffected7.1.9 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f96c18a766477e5f33d51697963a5c8aed260dae ↗
- https://git.kernel.org/stable/c/a9e0efcb1125e6b452c648671f15920c4955b681 ↗
- https://git.kernel.org/stable/c/1beb4dd6a30dea699e98990dd61f892ed1c0985e ↗
- https://git.kernel.org/stable/c/29fe74c9aa69d78c1c6a3930f1d9fc5db71a6eed ↗
- https://git.kernel.org/stable/c/b7949b0a7d998013b7ec8617a0ef5b07cca80be4 ↗
- https://git.kernel.org/stable/c/8444d66aa6b6e7fe0a26fa1a00a11cb4d0523783 ↗