In the Linux kernel, the following vulnerability has been resolved:
md: Fix missing release of 'active_io' for flush
submit_flushes atomic_set(&mddev->flush_pending, 1); rdev_for_each_rcu(rdev, mddev) atomic_inc(&mddev->flush_pending); bi->bi_end_io = md_end_flush submit_bio(bi); /* flush io is done first */ md_end_flush if (atomic_dec_and_test(&mddev->flush_pending)) percpu_ref_put(&mddev->active_io) -> active_io is not released
if (atomic_dec_and_test(&mddev->flush_pending)) -> missing release of active_io
For consequence, mddev_suspend() will wait for 'active_io' to be zero forever.
Fix this problem by releasing 'active_io' in submit_flushes() if 'flush_pending' is decreased to zero.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-64kb-devel | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub