CVE-2024-27023

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> md: Fix missing release of &amp;#39;active_io&amp;#39; for flush<br /> <br /> submit_flushes<br /> atomic_set(&amp;mddev-&gt;flush_pending, 1);<br /> rdev_for_each_rcu(rdev, mddev)<br /> atomic_inc(&amp;mddev-&gt;flush_pending);<br /> bi-&gt;bi_end_io = md_end_flush<br /> submit_bio(bi);<br /> /* flush io is done first */<br /> md_end_flush<br /> if (atomic_dec_and_test(&amp;mddev-&gt;flush_pending))<br /> percpu_ref_put(&amp;mddev-&gt;active_io)<br /> -&gt; active_io is not released<br /> <br /> if (atomic_dec_and_test(&amp;mddev-&gt;flush_pending))<br /> -&gt; missing release of active_io<br /> <br /> For consequence, mddev_suspend() will wait for &amp;#39;active_io&amp;#39; to be zero<br /> forever.<br /> <br /> Fix this problem by releasing &amp;#39;active_io&amp;#39; in submit_flushes() if<br /> &amp;#39;flush_pending&amp;#39; is decreased to zero.