CVE-2024-35787

CVE Details

Release Date:

2024-05-17

Description

In the Linux kernel, the following vulnerability has been resolved:\nmd/md-bitmap: fix incorrect usage for sb_index\nCommit d7038f951828 ('md-bitmap: don't use ->index for pages backing the\nbitmap file') removed page->index from bitmap code, but left wrong code\nlogic for clustered-md. current code never set slot offset for cluster\nnodes, will sometimes cause crash in clustered env.\nCall trace (partly):\nmd_bitmap_file_set_bit+0x110/0x1d8 [md_mod]\nmd_bitmap_startwrite+0x13c/0x240 [md_mod]\nraid1_make_request+0x6b0/0x1c08 [raid1]\nmd_handle_request+0x1dc/0x368 [md_mod]\nmd_submit_bio+0x80/0xf8 [md_mod]\n__submit_bio+0x178/0x300\nsubmit_bio_noacct_nocheck+0x11c/0x338\nsubmit_bio_noacct+0x134/0x614\nsubmit_bio+0x28/0xdc\nsubmit_bh_wbc+0x130/0x1cc\nsubmit_bh+0x1c/0x28

See more information about CVE-2024-35787 from MITRE CVE dictionary and NIST NVD

CVSS Scoring

NOTE: The following CVSS v3.1 metrics and score provided are preliminary and subject to review.

Base Score:	5.5	CVSS Vector:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector:	Local network	Attack Complexity:	Low
Privileges Required:	Low	User Interaction:	None
Scope:	Unchanged	Confidentiality Impact:	None
Integrity Impact:	None	Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 9 (kernel)	ELSA-2024-9315	2024-11-14