Medium 5.5Published May 17, 2024

CVE-2024-35805dm snapshot: fix lockup in dm_exception_table_exit

Updated under an hour ago (Oct 27, 2026, 5:50 AM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dm_exception_table_exit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding "cond_resched" to the loop that frees the exceptions.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e7d4cff57c3c43fdd72342c78d4138f509c7416e; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9759ff196e7d248bcf8386a7451d6ff8537a7d9c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 116562e804ffc9dc600adab6326dde31d72262c7; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3d47eb405781cc5127deca9a14e24b27696087a1; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e50f83061ac250f90710757a3e51b70a200835e2; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fa5c055800a7fd49a36bbb52593aca4ea986a366; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5f4ad4d0b0943296287313db60b3f84df4aad683; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6e7132ed3c07bd8a6ce3db4bb307ef2852b322dc	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	before 5.4.274; from 5.5 before 5.10.215; from 5.11 before 5.15.154; from 5.16 before 6.1.84; from 6.2 before 6.6.24; from 6.7 before 6.7.12; from 6.8 before 6.8.3	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/e7d4cff57c3c43fdd72342c78d4138f509c7416e	patch
https://git.kernel.org/stable/c/9759ff196e7d248bcf8386a7451d6ff8537a7d9c	patch
https://git.kernel.org/stable/c/116562e804ffc9dc600adab6326dde31d72262c7	patch
https://git.kernel.org/stable/c/3d47eb405781cc5127deca9a14e24b27696087a1	patch
https://git.kernel.org/stable/c/e50f83061ac250f90710757a3e51b70a200835e2	patch
https://git.kernel.org/stable/c/fa5c055800a7fd49a36bbb52593aca4ea986a366	patch
https://git.kernel.org/stable/c/5f4ad4d0b0943296287313db60b3f84df4aad683	patch
https://git.kernel.org/stable/c/6e7132ed3c07bd8a6ce3db4bb307ef2852b322dc	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	third-party-advisory
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.