Improper locking in Linux kernel - CVE-2024-35808

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90754

Improper locking in Linux kernel - CVE-2024-35808

Published: June 3, 2024 / Updated: May 14, 2025


Vulnerability identifier: #VU90754
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-35808
CWE-ID: CWE-667
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the raid_message() function in drivers/md/dm-raid.c. A local user can perform a denial of service (DoS) attack.


Affected software

Linux kernel
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Real Time Module
Public Cloud Module
SUSE Linux Enterprise Live Patching
openSUSE Leap
openEuler
Ubuntu
kernel-livepatch-SLE15-SP6-RT_Update_1-debugsource
kernel-livepatch-6_4_0-150600_10_5-rt
kernel-livepatch-6_4_0-150600_10_5-rt-debuginfo
python2-perf
kernel
python3-perf-debuginfo
kernel-debuginfo
perf
perf-debuginfo
kernel-tools-devel
kernel-debugsource
python3-perf
kernel-source
bpftool
kernel-devel
kernel-tools
python2-perf-debuginfo
kernel-tools-debuginfo
bpftool-debuginfo
kernel-headers
kernel-syms-azure
kernel-azure-vdso-debuginfo
kernel-azure-optional
ocfs2-kmp-azure-debuginfo
gfs2-kmp-azure
kselftests-kmp-azure-debuginfo
cluster-md-kmp-azure-debuginfo
reiserfs-kmp-azure
kernel-source-azure
kernel-devel-azure
kernel-azure-vdso
kernel-azure-devel
kernel-azure-devel-debuginfo
gfs2-kmp-azure-debuginfo
cluster-md-kmp-azure
kernel-azure-livepatch-devel
kernel-azure
kernel-azure-optional-debuginfo
kselftests-kmp-azure
ocfs2-kmp-azure
reiserfs-kmp-azure-debuginfo
kernel-azure-debugsource
dlm-kmp-azure-debuginfo
kernel-azure-extra-debuginfo
kernel-azure-debuginfo
kernel-azure-extra
dlm-kmp-azure
ocfs2-kmp-rt
kernel-rt_debug-devel-debuginfo
kernel-rt-vdso-debuginfo
kernel-rt-devel
gfs2-kmp-rt-debuginfo
kernel-rt-devel-debuginfo
kernel-rt-vdso
kernel-rt_debug-vdso
kselftests-kmp-rt-debuginfo
cluster-md-kmp-rt-debuginfo
kernel-rt_debug-debugsource
reiserfs-kmp-rt-debuginfo
kernel-rt_debug-devel
cluster-md-kmp-rt
reiserfs-kmp-rt
kernel-rt_debug-livepatch-devel
kernel-rt-debuginfo
gfs2-kmp-rt
kernel-rt-extra-debuginfo
kselftests-kmp-rt
kernel-rt_debug-vdso-debuginfo
kernel-rt_debug-debuginfo
kernel-rt
kernel-rt_debug
kernel-source-rt
kernel-devel-rt
ocfs2-kmp-rt-debuginfo
kernel-rt-optional
kernel-syms-rt
kernel-rt-debugsource
dlm-kmp-rt-debuginfo
kernel-rt-extra
dlm-kmp-rt
kernel-rt-optional-debuginfo
kernel-rt-livepatch-devel
kernel-extra-modules
linux-image-virtual-hwe-24.04 (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-hwe-24.04 (Ubuntu package)
linux-image-generic-64k-hwe-24.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-6.8.0-35-generic-64k (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-6.8.0-35-lowlatency-64k (Ubuntu package)
linux-image-6.8.0-35-lowlatency (Ubuntu package)
linux-image-6.8.0-35-generic (Ubuntu package)
linux-image-6.8.0-1004-gke (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-6.8.0-1005-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-ibm-classic (Ubuntu package)
linux-image-6.8.0-1006-ibm (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-6.8.0-1006-oracle-64k (Ubuntu package)
linux-image-6.8.0-1006-oracle (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-6.8.0-1006-oem (Ubuntu package)
linux-image-ibm-lts-24.04 (Ubuntu package)
linux-image-oem-24.04a (Ubuntu package)
linux-image-oem-24.04 (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-6.8.0-1008-azure-fde (Ubuntu package)
linux-image-6.8.0-1008-azure (Ubuntu package)

How to mitigate CVE-2024-35808

Install update from vendor's website.

Linux kernel - addressed in versions 6.7.12, 6.8.3
kernel-livepatch-SLE15-SP6-RT_Update_1-debugsource - update to 1-150600.1.5.1
kernel-livepatch-6_4_0-150600_10_5-rt - update to 1-150600.1.5.1
kernel-livepatch-6_4_0-150600_10_5-rt-debuginfo - update to 1-150600.1.5.1
python2-perf - update to 4.19.90-2406.1.0.0279
kernel - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
python3-perf-debuginfo - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-debuginfo - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
perf - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
perf-debuginfo - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-tools-devel - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-debugsource - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
python3-perf - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-source - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
bpftool - addressed in versions 4.19.90-2406.1.0.0279, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-devel - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-tools - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
python2-perf-debuginfo - update to 4.19.90-2406.1.0.0279
kernel-tools-debuginfo - addressed in versions 4.19.90-2406.1.0.0279, 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
bpftool-debuginfo - addressed in versions 4.19.90-2406.1.0.0279, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-headers - addressed in versions 5.10.0-136.87.0.168, 5.10.0-202.0.0.115, 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-syms-azure - update to 6.4.0-150600.8.5.1
kernel-azure-vdso-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-optional - update to 6.4.0-150600.8.5.4
ocfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
gfs2-kmp-azure - update to 6.4.0-150600.8.5.4
kselftests-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
cluster-md-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
reiserfs-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-source-azure - update to 6.4.0-150600.8.5.4
kernel-devel-azure - update to 6.4.0-150600.8.5.4
kernel-azure-vdso - update to 6.4.0-150600.8.5.4
kernel-azure-devel - update to 6.4.0-150600.8.5.4
kernel-azure-devel-debuginfo - update to 6.4.0-150600.8.5.4
gfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
cluster-md-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-livepatch-devel - update to 6.4.0-150600.8.5.4
kernel-azure - update to 6.4.0-150600.8.5.4
kernel-azure-optional-debuginfo - update to 6.4.0-150600.8.5.4
kselftests-kmp-azure - update to 6.4.0-150600.8.5.4
ocfs2-kmp-azure - update to 6.4.0-150600.8.5.4
reiserfs-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-debugsource - update to 6.4.0-150600.8.5.4
dlm-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-extra-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-extra - update to 6.4.0-150600.8.5.4
dlm-kmp-azure - update to 6.4.0-150600.8.5.4
ocfs2-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug-devel-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-vdso-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-devel - update to 6.4.0-150600.10.5.1
gfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-devel-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-vdso - update to 6.4.0-150600.10.5.1
kernel-rt_debug-vdso - update to 6.4.0-150600.10.5.1
kselftests-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
cluster-md-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-debugsource - update to 6.4.0-150600.10.5.1
reiserfs-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-devel - update to 6.4.0-150600.10.5.1
cluster-md-kmp-rt - update to 6.4.0-150600.10.5.1
reiserfs-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug-livepatch-devel - update to 6.4.0-150600.10.5.1
kernel-rt-debuginfo - update to 6.4.0-150600.10.5.1
gfs2-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt-extra-debuginfo - update to 6.4.0-150600.10.5.1
kselftests-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug-vdso-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug - update to 6.4.0-150600.10.5.1
kernel-source-rt - update to 6.4.0-150600.10.5.1
kernel-devel-rt - update to 6.4.0-150600.10.5.1
ocfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-optional - update to 6.4.0-150600.10.5.1
kernel-syms-rt - update to 6.4.0-150600.10.5.1
kernel-rt-debugsource - update to 6.4.0-150600.10.5.1
dlm-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-extra - update to 6.4.0-150600.10.5.1
dlm-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt-optional-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-livepatch-devel - update to 6.4.0-150600.10.5.1
kernel-extra-modules - update to 6.6.0-139.0.0.133
linux-image-virtual-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-virtual (Ubuntu package) - update to 6.8.0-35.35
linux-image-kvm (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-lpae (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-64k-hwe-24.04 (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic-64k (Ubuntu package) - update to 6.8.0-35.35
linux-image-generic (Ubuntu package) - update to 6.8.0-35.35
linux-image-6.8.0-35-generic-64k (Ubuntu package) - update to 6.8.0-35.35+1
linux-image-lowlatency-64k (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-lowlatency (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-35-lowlatency-64k (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-35-lowlatency (Ubuntu package) - update to 6.8.0-35.35.1
linux-image-6.8.0-35-generic (Ubuntu package) - update to 6.8.0-35.35+1
linux-image-6.8.0-1004-gke (Ubuntu package) - update to 6.8.0-1004.7
linux-image-gke (Ubuntu package) - update to 6.8.0-1004.7
linux-image-6.8.0-1005-raspi (Ubuntu package) - update to 6.8.0-1005.5
linux-image-raspi (Ubuntu package) - update to 6.8.0-1005.5
linux-image-ibm-classic (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-ibm (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oracle-64k (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oracle (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oracle-64k (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oracle (Ubuntu package) - update to 6.8.0-1006.6
linux-image-ibm (Ubuntu package) - update to 6.8.0-1006.6
linux-image-6.8.0-1006-oem (Ubuntu package) - update to 6.8.0-1006.6
linux-image-ibm-lts-24.04 (Ubuntu package) - update to 6.8.0-1006.6
linux-image-oem-24.04a (Ubuntu package) - update to 6.8.0-1006.6+1
linux-image-oem-24.04 (Ubuntu package) - update to 6.8.0-1006.6+1
linux-image-azure-fde (Ubuntu package) - update to 6.8.0-1008.8
linux-image-azure (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-azure-fde (Ubuntu package) - update to 6.8.0-1008.8
linux-image-6.8.0-1008-azure (Ubuntu package) - update to 6.8.0-1008.8

External References

Related Security Bulletins