CVE-2024-43820

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-43820
In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume rm-raid devices will occasionally trigger the following warning when being resumed after a table load because DM_RECOVERY_RUNNING is set: WARNING: CPU: 7 PID: 5660 at drivers/md/dm-raid.c:4105 raid_resume+0xee/0x100 [dm_raid] The failing check is: WARN_ON_ONCE(test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)); This check is designed to make sure that the sync thread isn't registered, but md_check_recovery can set MD_RECOVERY_RUNNING without the sync_thread ever getting registered. Instead of checking if MD_RECOVERY_RUNNING is set, check if sync_thread is non-NULL.
CVSS

No CVSS.

References
Link Resource
https://git.kernel.org/stable/c/3199a34bfaf7561410e0be1e33a61eba870768fc
https://git.kernel.org/stable/c/a5c15a78c0e1631b7df822b56e8b6424e4d1ca3e
Configurations

No configuration.

History

19 Aug 2024, 12:59

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm-raid: corrige la verificación WARN_ON_ONCE para sync_thread en raid_resume Los dispositivos rm-raid ocasionalmente activarán la siguiente advertencia cuando se reanude después de una carga de tabla porque DM_RECOVERY_RUNNING está configurado: ADVERTENCIA: CPU: 7 PID: 5660 en drivers/md/dm-raid.c:4105 raid_resume+0xee/0x100 [dm_raid] La verificación fallida es: WARN_ON_ONCE(test_bit(MD_RECOVERY_RUNNING, &mddev->recovery)); Esta verificación está manipulada para garantizar que el hilo de sincronización no esté registrado, pero md_check_recovery puede configurar MD_RECOVERY_RUNNING sin que sync_thread se registre. En lugar de verificar si MD_RECOVERY_RUNNING está configurado, verifique si sync_thread no es NULL.

17 Aug 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-17 10:15

Updated : 2024-08-19 12:59

NVD link : CVE-2024-43820

Mitre link : CVE-2024-43820

CVE.ORG link : CVE-2024-43820

JSON object : View

Products Affected

No product.

CWE

No CWE.