PT-2024-26743 · Linux+6 · Linux Kernel+6
Mikulas Patocka
·
Published
2024-03-05
·
Updated
2026-05-26
·
CVE-2024-35794
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the dm-raid component in the Linux kernel, where the sync thread is not properly frozen during suspend. This is caused by the removal of the MD RECOVERY FROZEN flag from md stop writes() in commit f52f5c71f3d4, which doesn't realize that dm-raid relies on md stop writes() to freeze the sync thread indirectly. The flag MD RECOVERY FROZEN only prevents new sync thread from starting and can't stop the running sync thread. To fix this, the flag should be added back to md stop writes(), and the stop sync thread() function should be moved to md stop writes(). Additionally, the raid message function should be disallowed from changing the sync thread status during suspend.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu