CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit
In the Linux kernel, the following vulnerability has been resolved:
dm snapshot: fix lockup in dmexceptiontableexit
The Linux kernel CVE team has assigned CVE-2024-35805 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051739-CVE-2024-35805-179f@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
dm snapshot: fix lockup in dmexceptiontableexit
There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding "condresched" to the loop that frees the exceptions.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35805?
CVE-2024-35805 is considered a high severity vulnerability in the Linux kernel.
How do I fix CVE-2024-35805?
To fix CVE-2024-35805, update your Linux kernel to version 5.4.274, 5.10.215, 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3, or 6.9, or use the respective patched Debian version.
Which systems are affected by CVE-2024-35805?
CVE-2024-35805 affects specific versions of the Linux kernel, including those in Red Hat and Debian systems.
What type of vulnerability is CVE-2024-35805?
CVE-2024-35805 is a lockup vulnerability associated with the dm snapshot feature in the Linux kernel.
Is there a public advisory for CVE-2024-35805?
Yes, there is an upstream advisory regarding CVE-2024-35805 from the Linux kernel CVE team.