In the Linux kernel, the following vulnerability has been resolved:
md: Fix missing release of 'active_io' for flush
submit_flushes atomic_set(&mddev->flush_pending, 1); rdev_for_each_rcu(rdev, mddev) atomic_inc(&mddev->flush_pending); bi->bi_end_io = md_end_flush submit_bio(bi); /* flush io is done first */ md_end_flush if (atomic_dec_and_test(&mddev->flush_pending)) percpu_ref_put(&mddev->active_io) -> active_io is not released
if (atomic_dec_and_test(&mddev->flush_pending)) -> missing release of active_io
For consequence, mddev_suspend() will wait for 'active_io' to be zero forever.
Fix this problem by releasing 'active_io' in submit_flushes() if 'flush_pending' is decreased to zero.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-zfcpdump | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub