PT-2024-8397 · Linux+5 · Linux Kernel+5

Heming Zhao

·

Published

2024-02-26

·

Updated

2025-09-29

·

CVE-2024-35787

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to incorrect usage of sb index in the md/md-bitmap component of the Linux kernel. This can cause a crash in a clustered environment due to wrong code logic for clustered-md, where the slot offset for cluster nodes is never set. The problem arises from the removal of page->index from bitmap code, which was done by commit d7038f951828. The call trace includes functions such as md bitmap file set bit, md bitmap startwrite, raid1 make request, and others, indicating the path of execution leading to the potential crash. The vulnerability may allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-09956
CVE-2024-35787
INFSA-2024_9315
RHSA-2024:9315
RHSA-2024_9315
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Ubuntu