PT-2024-14589 · Linux · Linux Kernel

Published 2024-02-20 · Updated 2024-02-22 · CVE-2023-52437

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved by reverting a commit that introduced a race condition, potentially causing system hangs. The issue occurred in the md/raid5 module, where a flag MD SB CHANGE PENDING was not properly cleared, leading to a deadlock. The commit that introduced this issue has been reverted, fixing the problem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-52437

Affected Products

Linux Kernel

References · 17

• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52437 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52437 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52437 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52437 · Security Note
• https://ubuntu.com/security/CVE-2023-52437 · Vendor Advisory
• https://git.kernel.org/stable/c/87165c64fe1a98bbab7280c58df3c83be2c98478 · Note
• https://git.kernel.org/stable/c/e16a0bbdb7e590a6607b0d82915add738c03c069 · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-52437 · Note
• https://git.kernel.org/stable/c/84c39986fe6dd77aa15f08712339f5d4eb7dbe27 · Note
• https://git.kernel.org/stable/c/bed0acf330b2c50c688f6d9cfbcac2aa57a8e613 · Note
• https://git.kernel.org/linus/bed9e27baf52a09b7ba2a3714f1e24e17ced386d · Note
• https://git.kernel.org/stable/c/0de40f76d567133b871cd6ad46bb87afbce46983 · Note
• https://t.me/cvenotify/72044 · Telegram Post
• https://git.kernel.org/stable/c/cfa46838285814c3a27faacf7357f0a65bb5d152 · Note
• https://twitter.com/CVEnew/status/1760014555910939077 · Twitter Post