Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-52437
HistoryFeb 20, 2024 - 9:15 p.m.

CVE-2023-52437

2024-02-2021:15:08
Debian Security Bug Tracker
security-tracker.debian.org
13
linux kernel
vulnerability
cve-2023-52437
resolved
race
system hung
md/raid5
md_sb_change_pending

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved: Revert “md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d” This reverts commit 5e2cf333b7bd5d3e62595a44d598a254c697cd74. That commit introduced the following race and can cause system hung. md_write_start: raid5d: // mddev->in_sync == 1 set “MD_SB_CHANGE_PENDING” // running before md_write_start wakeup it waiting “MD_SB_CHANGE_PENDING” cleared >>>>>>>>> hung wakeup mddev->thread … waiting “MD_SB_CHANGE_PENDING” cleared >>>> hung, raid5d should clear this flag but get hung by same flag. The issue reverted commit fixing is fixed by last patch in a new way.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%