Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26880
HistoryApr 17, 2024 - 6:27 p.m.

CVE-2024-26880

2024-04-1718:27:13
redhat.com
access.redhat.com
9
linux kernel
vulnerability
cve-2024-26880
crash fix
dm
resume method
internal suspend
list corruption
kernel crash

AI Score

8.4

Confidence

High

EPSS

0

Percentile

13.0%

A flaw was found in the Linux kernel’s device-mapper (dm) component. The issue arises during internal suspend operations where the resume method is not correctly called. This issue leads to problems such as list corruption, specifically observed when running the lvm2 test suite. The problem occurs because of two consecutive calls to the origin_postsuspend function, which results in attempts to remove an entry from a list that has already been removed, triggering a crash. The kernel patch resolves this issue by ensuring that the preresume and resume methods are paired correctly during internal suspend and resume cycles. This prevents the list corruption and avoids the crash. The patch has been integrated into the kernel, and users are encouraged to update their systems to the latest version to ensure this vulnerability is mitigated.