CVE-2026-68357
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
When a watchdog governor is unregistered, it updates existing watchdog
devices that were using this governor by falling back to `default_gov`.
If the governor being unregistered is currently set as `default_gov`,
the `default_gov` is never cleared. This leads to 2 use-after-free
issues:
1. New watchdog devices registered after this point will inherit the
dangling `default_gov`.
2. Existing watchdog devices using the unregistered governor will have
their `wdd->gov` reassigned to the dangling `default_gov`.
Fix the UAF by clearing `default_gov` if it matches the governor being
unregistered.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
3 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:20:45 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/472ec1e34ff0bb26379805cae808f658cce58c35
Added
Reference
https://git.kernel.org/stable/c/7a2ee3ec6f208307eca1119a343c7b5d39c03708
Added
Reference
https://git.kernel.org/stable/c/b9ae33faa96bdec6bc60e4c5f8f53786182e4207
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"2e47b91b9b4020fcc01def14d6b6556d66074cf4","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"0ca252720f0e38411cfec3431db9bb1aed0a412c","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7d1658b066de30f4b23afc14814d22416a971e6e","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7993d626983cc58fbde9607333cfd2d57725c197","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.9","status":"affected"},{"version":"0","lessThan":"4.9","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2487 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"b9ae33faa96bdec6bc60e4c5f8f53786182e4207","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"472ec1e34ff0bb26379805cae808f658cce58c35","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7a2ee3ec6f208307eca1119a343c7b5d39c03708","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"2e47b91b9b4020fcc01def14d6b6556d66074cf4","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"0ca252720f0e38411cfec3431db9bb1aed0a412c","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7d1658b066de30f4b23afc14814d22416a971e6e","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7993d626983cc58fbde9607333cfd2d57725c197","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.9","status":"affected"},{"version":"0","lessThan":"4.9","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual"
CVE Modified by kernel.org
8/17/2026 2:17:43 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"2e47b91b9b4020fcc01def14d6b6556d66074cf4","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"0ca252720f0e38411cfec3431db9bb1aed0a412c","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7d1658b066de30f4b23afc14814d22416a971e6e","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7993d626983cc58fbde9607333cfd2d57725c197","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.9","status":"affected"},{"version":"0","lessThan":"4.9","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc5","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"2e47b91b9b4020fcc01def14d6b6556d66074cf4","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"0ca252720f0e38411cfec3431db9bb1aed0a412c","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7d1658b066de30f4b23afc14814d22416a971e6e","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7993d626983cc58fbde9607333cfd2d57725c197","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.9","status":"affected"},{"version":"0","lessThan":"4.9","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
New CVE Received from kernel.org
8/10/2026 9:20:28 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
When a watchdog governor is unregistered, it updates existing watchdog
devices that were using this governor by falling back to `default_gov`.
If the governor being unregistered is currently set as `default_gov`,
the `default_gov` is never cleared. This leads to 2 use-after-free
issues:
1. New watchdog devices registered after this point will inherit the
dangling `default_gov`.
2. Existing watchdog devices using the unregistered governor will have
their `wdd->gov` reassigned to the dangling `default_gov`.
Fix the UAF by clearing `default_gov` if it matches the governor being
unregistered.
Added
Reference
https://git.kernel.org/stable/c/0ca252720f0e38411cfec3431db9bb1aed0a412c
Added
Reference
https://git.kernel.org/stable/c/2e47b91b9b4020fcc01def14d6b6556d66074cf4
Added
Reference
https://git.kernel.org/stable/c/7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661
Added
Reference
https://git.kernel.org/stable/c/7993d626983cc58fbde9607333cfd2d57725c197
Added
Reference
https://git.kernel.org/stable/c/7d1658b066de30f4b23afc14814d22416a971e6e
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"2e47b91b9b4020fcc01def14d6b6556d66074cf4","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"0ca252720f0e38411cfec3431db9bb1aed0a412c","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7d1658b066de30f4b23afc14814d22416a971e6e","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7993d626983cc58fbde9607333cfd2d57725c197","versionType":"git","status":"affected"},{"version":"da0d12ff2b829a35e9921918e925d79497b82bef","lessThan":"7362ba0f9c96ac3ad6a2ca3995bd9fc9a28a8661","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/watchdog/watchdog_pretimeout.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4.9","status":"affected"},{"version":"0","lessThan":"4.9","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc5","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-68357 NVD
Published Date: 08/10/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
