CVE-2026-68357

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()<br /> <br /> When a watchdog governor is unregistered, it updates existing watchdog<br /> devices that were using this governor by falling back to `default_gov`.<br /> <br /> If the governor being unregistered is currently set as `default_gov`,<br /> the `default_gov` is never cleared. This leads to 2 use-after-free<br /> issues:<br /> 1. New watchdog devices registered after this point will inherit the<br /> dangling `default_gov`.<br /> 2. Existing watchdog devices using the unregistered governor will have<br /> their `wdd-&gt;gov` reassigned to the dangling `default_gov`.<br /> <br /> Fix the UAF by clearing `default_gov` if it matches the governor being<br /> unregistered.