dm: fix unlocked test for dm_suspended_md
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.75, 6.16, 6.18.14, 6.19.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_zones tests if the device is suspended with the "dm_suspended_md" call. However, this function is called without holding any locks, so the device may be suspended just after it. Move the call to dm_suspended_md after dm_get_live_table, so that the device can't be suspended after the suspended state was tested.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From f9c1bdf24615303d48a2d0fd629c88f3189563aa · fixed in 175ac0a6115400278d3900f5a04a58b17b3f6cd0; From 37f53a2c60d03743e0eacf7a0c01c279776fef4e · fixed in 7a3385e97af2b6f485fef11e82d8c29adee4be93; From 37f53a2c60d03743e0eacf7a0c01c279776fef4e · fixed in d809a36692ee1394cac85ce6ba7cf8ea58da5812; From 37f53a2c60d03743e0eacf7a0c01c279776fef4e · fixed in 24c405fdbe215c45e57bba672cc42859038491ee; From 6.12.34 · fixed in 6.12.75; From 6.15.3 · fixed in 6.16
- Linux Linux
6.16
- KernelLinux
fixed in 6.12.75; From 6.13.0 · fixed in 6.18.14; From 6.16.0 · fixed in 6.19.4