In the Linux kernel, the following vulnerability has been resolved:
md/dm-raid: don't call md_reap_sync_thread() directly
Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.
However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").
Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-develUpgrade dtb-armUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade dtb-allwinner | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws | Jul 1, 2024 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub