The vulnerability arises when a watchdog governor is removed and the kernel fails to clear the global default governor pointer. This results in two separate use‑after‑free instances: newly created watchdog devices inherit the dangling pointer, and existing devices that were using the removed governor are reassigned to the stale pointer. Such use‑after‑free can lead to unpredictable memory corruption and system instability, potentially enabling denial‑of‑service attacks or arbitrary code execution if an attacker can manipulate the watchdog subsystem. The weakness is a classic use‑after‑free flaw (CWE‑416).

All Linux kernel implementations that include the watchdog subsystem and have not applied the commit that clears the default governor on unregistration are affected. No specific vendor or version numbers are listed in the available data; the vulnerability applies to kernel versions prior to the fix commit identified in the references.

The CVSS score is not provided, and no EPSS data is available. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely local or requires privileged code execution on the kernel; therefore the risk is significant for systems that rely on the watchdog subsystem. Even without an available exploit, the use‑after‑free presents a serious stability threat that could be leveraged by an attacker with kernel write access. The risk remains high until the kernel is updated or the watchdog functionality is disabled.