CVE-2024-35794: Vulnerability in linux-libc-dev package - kernel: dm-raid: really frozen sync_thread during suspend
Summary
CVE-2024-35794: In the Linux kernel, the following vulnerability has been resolved: dm-raid: really frozen sync_thread during suspend 1) commit f52f5c71f3d4 ("md: fix stopping sync thread") remove MD_RECOVERY_FROZEN from md_stop_writes(... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling C programs that use the Linux kernel interfaces. It is an essential component for building and linking applications that interact with the kernel. This vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability in the linux-libc-dev package is related to the dm-raid functionality in the Linux kernel. The issue arises from a flaw in the handling of the sync_thread during suspend. The vulnerability allows for unexpected behavior and potential corruption of data in certain scenarios. The vulnerability has a CVSS score of 5.5, indicating a medium severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advised to apply the official fix as soon as possible.
Conclusion
The linux-libc-dev package version 6.1.90-1 is affected by a vulnerability related to the dm-raid functionality in the Linux kernel. This vulnerability can lead to unexpected behavior and potential data corruption. It is recommended to update the package to a fixed version as soon as possible. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides header files and libraries for compiling C programs that interact with the Linux kernel.
dm-raid is a functionality in the Linux kernel that allows for software RAID (Redundant Array of Independent Disks) configurations using the device-mapper framework.
The vulnerability can lead to unexpected behavior and potential data corruption in certain scenarios involving the dm-raid functionality during suspend.
The CVSS score of this vulnerability is 5.5, indicating a medium severity level.
To fix this vulnerability, update the linux-libc-dev package to a version that includes the necessary patches.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
