CVE-2026-68357
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() When a watchdog governor is unregistered, it updates existing watchdog devices that were using this governor by falling back to `default_gov`. If the governor being unregistered is currently set as `default_gov`, the `default_gov` is never cleared. This leads to 2 use-after-free issues: 1. New watchdog devices registered after this point will inherit the dangling `default_gov`. 2. Existing watchdog devices using the unregistered governor will have their `wdd->gov` reassigned to the dangling `default_gov`. Fix the UAF by clearing `default_gov` if it matches the governor being unregistered.
References
- https://git.kernel.org/stable/c/b9ae33faa96bdec6bc60e4c5f8f53786182e4207
- https://git.kernel.org/stable/c/472ec1e34ff0bb26379805cae808f658cce58c35
- https://git.kernel.org/stable/c/7a2ee3ec6f208307eca1119a343c7b5d39c03708
- https://git.kernel.org/stable/c/2e47b91b9b4020fcc01def14d6b6556d66074cf4
- https://git.kernel.org/stable/c/0ca252720f0e38411cfec3431db9bb1aed0a412c
- https://git.kernel.org/stable/c/7d1658b066de30f4b23afc14814d22416a971e6e
- https://git.kernel.org/stable/c/7993d626983cc58fbde9607333cfd2d57725c197
- https://git.kernel.org/stable/c/7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661
European references
- ENISA EUVD · EUVD-2026-55458
- GCVE · GCVE-0-2026-68357
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1231 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1202 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1164 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1069 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected da0d12ff2b829a35e9921918e925d79497b82bef < b9ae33faa96bdec6bc60e4c5f8f53786182e4207 ; affected da0d12ff2b829a35e9921918e925d79497b82bef < 472ec1e34ff0bb26379805cae808f658cce58c35 ; affected da0d12ff2b829a35e9921918e925d79497b82bef < 7a2ee3ec6f208307eca1119a343c7b5d39c03708 ; affected da0d12ff2b829a35e9921918e925d79497b82bef < 2e47b91b9b4020fcc01def14d6b6556d66074cf4 ; affected da0d12ff2b829a35e9921918e925d79497b82bef < 0ca252720f0e38411cfec3431db9bb1aed0a412c ; affected da0d12ff2b829a35e9921918e925d79497b82bef < 7d1658b066de30f4b23afc14814d22416a971e6e |
| Linux · Linux | affected 4.9 ; unaffected 0 < 4.9 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.148 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |