In the Linux kernel, the following vulnerability has been resolved:
md/dm-raid: don't call md_reap_sync_thread() directly
Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.
However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").
Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-nvidia | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-aws | Jul 1, 2024 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub