In the Linux kernel, the following vulnerability has been resolved:
md/dm-raid: don't call md_reap_sync_thread() directly
Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.
However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").
Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-renesasUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-caviumUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade dtb-nvidia | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-awsUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp | Jul 1, 2024 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub