CVE-2024-35805

In the Linux kernel, the following vulnerability has been resolved:

dm snapshot: fix lockup in dm_exception_table_exit

The Linux kernel CVE team has assigned CVE-2024-35805 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051739-CVE-2024-35805-179f@gregkh/T

This vulnerability is rated as Low severity because managing and tearing down device-mapper snapshots requires elevated administrative privileges (such as root or CAP_SYS_ADMIN), precluding unprivileged local users from triggering the issue. The flaw occurs during the deconstruction of snapshot volumes holding an extensive set of exceptions, where kernel execution may induce a soft lockup by failing to reschedule while deallocating exception tables. Consequently, the blast radius is confined to a local denial-of-service condition initiated during privileged storage workflows.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.