Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — md/dm-raid: don't call md_reap_sync_thread() directly
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0018 7.9 —
AFFECTED
Product Versions Fixed
Linux be83651f0050ca8621d58d35dad558e9c45cb18f – —
Linux 3.10 – 6.7.12
TIMELINE
May 17 Reserved by Linux
May 17 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-35808 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
md/dm-raid: don't call md_reap_sync_thread() directly
Currently md_reap_sync_thread() is called from raid_message() directly
without holding 'reconfig_mutex', this is definitely unsafe because
md_reap_sync_thread() can change many fields that is protected by
'reconfig_mutex'.
However, hold 'reconfig_mutex' here is still problematic because this
will cause deadlock, for example, commit 130443d60b1b ("md: refactor
idle/frozen_sync_thread() to fix deadlock").
Fix this problem by using stop_sync_thread() to unregister sync_thread,
like md/raid did.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| May 17, 2024 | Reserved | Reserved by Linux |
| May 17, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-35808 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | be83651f0050ca8621d58d35dad558e9c45cb18f | — |
| Linux | Linux | — | 3.10 | 6.7.12 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-35808 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.