CVE-2024-43914: linux
Vulnerability summary
CVE-2024-43914 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 38 · Related 33Timeline
- 26-08-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUG_ON() can be triggerred by the test: kernel BUG at drivers/md/raid5.c:6278! invalid opcode: 0000 [#1] PREEMPT SMP PTI irq event stamp: 158985 CPU: 6 PID: 891 Comm: md0_reshape Not tainted 6.9.0-03335-g7592a0b0049a #94 RIP: 0010:reshape_request+0x3f1/0xe60 Call Trace: <TASK> raid5_sync_request+0x43d/0x550 md_do_sync+0xb7a/0x2110 md_thread+0x294/0x2b0 kthread+0x147/0x1c0 ret_from_fork+0x59/0x70 ret_from_fork_asm+0x1a/0x30 </TASK> Root cause is that --revert-reshape update the raid_disks from 5 to 4, while reshape position is still set, and after reassembling the array, reshape position will be read from super block, then during reshape the checking of 'writepos' that is caculated by old reshape position will fail. Fix this panic the easy way first, by converting the BUG_ON() to WARN_ON(), and stop the reshape if checkings fail. Noted that mdadm must fix --revert-shape as well, and probably md/raid should enhance metadata validation as well, however this means reassemble will fail and there must be user tools to fix the wrong metadata.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.23%
Chance of exploitation in the next 30 days
Percentile
13%
Versus all other CVEs
30-day change
0.00 pp
From 0.23% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu129 products
- linuxAll versions (No fix recorded) | < 4.4.0-263.297 | < 4.15.0-233.245 | < 5.4.0-200.220 | < 5.15.0-125.135 | < 6.8.0-50.51
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1140.146 | < 4.4.0-1178.193 | < 4.15.0-1177.190 | < 5.4.0-1135.145 | < 5.15.0-1072.78 | < 6.8.0-1020.22
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < 2c92f8c1c456d556f15cbf51667b385026b2e6a0 | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < 6b33c468d543f6a83de2d61f09fec74b27e19fd2 | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < c384dd4f1fb3b14a2fd199360701cc163ea88705 | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < bf0ff69a42a3d2d46876d0514ecf13dffc516666 | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < 3b33740c1750a39e046339ff9240e954f0156707 | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < 775a9ba16c9ffe98fe54ebf14e55d5660f2bf600 | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < 4811d6e5d9f4090c3e0ff9890eb24077108046ab | ≥ ec32a2bd35bd6b933a5db6542c48210ce069a376, < 305a5170dc5cf3d395bb4c4e9239bca6d0b54b49 | 2.6.30
- linux_kernel< 4.19.320 | ≥ 4.20, < 5.4.282 | ≥ 5.5, < 5.10.224 | ≥ 5.11, < 5.15.165 | ≥ 5.16, < 6.1.105 | ≥ 6.2, < 6.6.46 | ≥ 6.7, < 6.10.5
Debian1 product
- linux< 6.1.106-1 | < 6.10.6-1
3 vendors · 132 products
