CVE-2024-35787

A security vulnerability was identified in the Linux kernel's MD (Multiple Device) subsystem, specifically within the bitmap handling code for clustered environments. The issue arises from incorrect usage of the sb_index field, leading to potential system crashes in clustered configurations.

This vulnerability is rated as Moderate rather than Important because it requires a specialized, non-default clustered storage configuration and only results in a denial of service without risking data confidentiality or integrity. On standard Red Hat Enterprise Linux deployments, clustered Multiple Device (MD) setups are uncommon, limiting exposure to environments explicitly configured with shared-storage RAID arrays. Local users with write privileges on the affected storage volume could trigger a kernel crash, while non-clustered software RAID devices are not susceptible to this failure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.