In the Linux kernel, the following vulnerability has been resolved:
md/dm-raid: don't call md_reap_sync_thread() directly
Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.
However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").
Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kb-extra | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-virtual | Jul 1, 2024 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub