In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free by calling del_timer_sync() This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux
  • Rhel Eus

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:7001 2024-09-24T00:00:00Z
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 8.8 Extended Update Support
kernel-0:4.18.0-477.75.1.el8_8 cpe:/o:redhat:rhel_eus:8.8 RHSA-2024:8107 2024-10-15T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/1a053c4d716898a53c2e31c574a70ea0c37044a3 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/4c05dac488a660fe2925c047ecb119e7afaaeb1e cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/58606882ad8ec6c39e0f40344b922921ef94ab4d cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/66ba9cf929b1c4fabf545bd4c18f6f64e23e46e4 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/8bec568d7518b1504a602ed5376bb322e4dbb270 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/ca96b8ea5e74956071154bdb456778cc3027e79f cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/d0212f095ab56672f6f36aabc605bda205e1e0bf cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/db222f1477ad5692cd454709b714949807e5d111 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/ecd620e0fb1ff7f78fdb593379b2e6938c99707a cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052132-CVE-2021-47321-1b9b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47321 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47321 cve-icon
History

Wed, 16 Oct 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/o:redhat:rhel_eus:8.8
Vendors & Products Redhat rhel Eus

Tue, 24 Sep 2024 11:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8

Tue, 24 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:35:35.877Z

Updated: 2024-11-04T12:03:39.271Z

Reserved: 2024-05-21T14:28:16.974Z

Link: CVE-2021-47321

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:08.446Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:19.297

Modified: 2024-05-21T16:54:26.047

Link: CVE-2021-47321

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47321 - Bugzilla