CVE-2024-35808CWE-667

CVE-2024-35808

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

md/dm-raid: don't call md_reap_sync_thread() directly

Currently md_reap_sync_thread() is called from raid_message() directly

without holding 'reconfig_mutex', this is definitely unsafe because

md_reap_sync_thread() can change many fields that is protected by

'reconfig_mutex'.

However, hold 'reconfig_mutex' here is still problematic because this

will cause deadlock, for example, commit 130443d60b1b ("md: refactor

idle/frozen_sync_thread() to fix deadlock").

Fix this problem by using stop_sync_thread() to unregister sync_thread,

like md/raid did.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-05-17T18:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 3.10, < 6.7.126.7.12
linux/linux_kernel≥ 6.8, < 6.8.36.8.3
References (6)
EPSS history
Timeline
  • 17 MAY 13:23Z
    md/dm-raid: don't call md_reap_sync_thread() directly
    cvelistv5