Riskcovery

CVE-2024-35808

md/dm-raid: don't call md_reap_sync_thread() directly

State
Published
Severity
7.8 High
Published
May 17, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

md/dm-raid: don't call md_reap_sync_thread() directly

Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.

However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").

Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • be83651f0050ca8621d58d35dad558e9c45cb18f to before 347dcdc15a1706f61aa545ae498ededdf31aeebcAffected
  • be83651f0050ca8621d58d35dad558e9c45cb18f to before 9e59b8d76ff511505eb0dd1478329f09e0f04669Affected
  • be83651f0050ca8621d58d35dad558e9c45cb18f to before cd32b27a66db8776d8b8e82ec7d7dde97a8693b0Affected
LinuxLinux
  • 3.10Affected
  • before 3.10Not affected
  • 6.7.12 through 6.7.*Not affected
  • 6.8.3 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.