CVE-2024-39476 md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Deadlock and BUG_ON Issues in RAID5 with CVEs Microsoft has published two critical updates addressing vulnerabilities in the md/raid5 subsystem. CVE-2024-39476, published on July 5, 2024, resolves a deadlock issue where raid5d() could wait for itself to clear a pending state. CVE-2024-43914, published on August 26, 2024, prevents a BUG_ON() condition during reshape operations after reassembling. 2 sources 39