PT-2024-21568 · Linux+5 · Linux Kernel+5

Published

2024-02-21

·

Updated

2025-11-13

·

CVE-2024-26899

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock issue has been resolved in the Linux kernel. The open mutex of gendisk is used to protect open/close block devices, but in bd link disk holder(), it is used to protect the creation of a symlink between the holding disk and slave bdev, which introduces some issues. When bd link disk holder() is called, the driver is usually in the process of initialization/modification and may suspend submitting io. At this time, any io holding open mutex, such as scanning partitions, can cause deadlocks. For example, in raid, a deadlock can occur when one thread is scanning a partition and another thread is adding a new device to the raid. The issue is fixed by introducing a local mutex blk holder mutex to replace open mutex.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2025-02908
CVE-2024-26899
INFSA-2024_9315
RHSA-2024:9315
RHSA-2024_9315
SUSE-SU-2024:2135-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu