cve 2024 35808

A high-risk flaw in the Linux kernel’s software RAID code, tracked as CVE-2024-35808, has been quietly fixed upstream and pushed into vendor updates: the md/dm-raid driver called md_reap_sync_thread from raid_message without the necessary synchronization, creating a window where the kernel’s...