-

CVE-2026-68357

watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

In the Linux kernel, the following vulnerability has been resolved:

watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

When a watchdog governor is unregistered, it updates existing watchdog
devices that were using this governor by falling back to `default_gov`.

If the governor being unregistered is currently set as `default_gov`,
the `default_gov` is never cleared.  This leads to 2 use-after-free
issues:
1. New watchdog devices registered after this point will inherit the
   dangling `default_gov`.
2. Existing watchdog devices using the unregistered governor will have
   their `wdd->gov` reassigned to the dangling `default_gov`.

Fix the UAF by clearing `default_gov` if it matches the governor being
unregistered.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < b9ae33faa96bdec6bc60e4c5f8f53786182e4207
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 472ec1e34ff0bb26379805cae808f658cce58c35
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 7a2ee3ec6f208307eca1119a343c7b5d39c03708
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 2e47b91b9b4020fcc01def14d6b6556d66074cf4
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 0ca252720f0e38411cfec3431db9bb1aed0a412c
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 7d1658b066de30f4b23afc14814d22416a971e6e
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 7993d626983cc58fbde9607333cfd2d57725c197
Status affected
Version da0d12ff2b829a35e9921918e925d79497b82bef
Version < 7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.9
Status affected
Version 0
Version < 4.9
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2e47b91b9b4020fcc01def14d6b6556d66074cf4
https://git.kernel.org/stable/c/0ca252720f0e38411cfec3431db9bb1aed0a412c
https://git.kernel.org/stable/c/7d1658b066de30f4b23afc14814d22416a971e6e
https://git.kernel.org/stable/c/7993d626983cc58fbde9607333cfd2d57725c197
https://git.kernel.org/stable/c/7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661
https://git.kernel.org/stable/c/472ec1e34ff0bb26379805cae808f658cce58c35
https://git.kernel.org/stable/c/7a2ee3ec6f208307eca1119a343c7b5d39c03708
https://git.kernel.org/stable/c/b9ae33faa96bdec6bc60e4c5f8f53786182e4207