PT-2024-30713 · Linux+7 · Linux Kernel+7
Li Nan
·
Published
2024-06-10
·
Updated
2025-09-29
·
CVE-2024-43855
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock vulnerability has been resolved in the Linux kernel. The issue occurs when the kernel is being suspended while a flush bio is in progress, causing a complex deadlock scenario. The root cause is the non-atomic increment and decrement of
active io during the flush process. To fix the issue, the kernel now ensures that active io is only incremented and decremented once during the entire flush process. Additionally, a WARN ON has been added to prevent future modifications from introducing issues.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu