CVE-2024-43820

MEDIUM

Linux Kernel 6.7.12-6.8, 6.9, 6.10.3-6.10.*, 6.11 - Denial of Service via dm-raid Resume Check

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume rm-raid devices will occasionally trigger the following warning when being resumed after a table load because DM_RECOVERY_RUNNING is set: WARNING: CPU: 7 PID: 5660 at drivers/md/dm-raid.c:4105 raid_resume+0xee/0x100 [dm_raid] The failing check is: WARN_ON_ONCE(test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)); This check is designed to make sure that the sync thread isn't registered, but md_check_recovery can set MD_RECOVERY_RUNNING without the sync_thread ever getting registered. Instead of checking if MD_RECOVERY_RUNNING is set, check if sync_thread is non-NULL.

Scores

CVSS v3 5.5
EPSS 0.0020
EPSS Percentile 9.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (12)
linux/Kernel 6.9.0 - 6.10.3linux
Linux/Linux < 6.9
Linux/Linux 16c4770c75b1223998adbeb7286f9a15c65fba73 - 3199a34bfaf7561410e0be1e33a61eba870768fc
Linux/Linux 16c4770c75b1223998adbeb7286f9a15c65fba73 - a5c15a78c0e1631b7df822b56e8b6424e4d1ca3e
Linux/Linux 6.10.3 - 6.10.*
Linux/Linux 6.11
Linux/Linux 6.7.12 - 6.8
Linux/Linux 6.8.3 - 6.9
Linux/Linux 6.9
Linux/Linux af916cb66a80597f3523bc85812e790bcdcfd62b
... and 2 more
Published Aug 17, 2024
Tracked Since Feb 18, 2026