In the Linux kernel, the following vulnerability has been resolved:
md/dm-raid: don't call md_reap_sync_thread() directly
Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.
However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").
Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-debug | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure | Jul 1, 2024 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub