Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev. However, if the read io fails, recovery_request_write() returns without issuing the write io, in this case, end_sync_request() is only called once and 'remaining' is leaked, cause an io hang. Fix the problem by decreasing 'remaining' according to if 'bio' and 'repl_bio' is valid.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
24afd80d99f80a79d8824d2805114b8b067e9823 to < cb827ed2bb34480dc102146d3a1f89fdbcafc028affected24afd80d99f80a79d8824d2805114b8b067e9823 to < 1d2c6c6e37fe5de11fd01a82badf03390e12df7aaffected24afd80d99f80a79d8824d2805114b8b067e9823 to < 8c5d5d7ffd1e76734811b8ea5417cf0432b9952caffected24afd80d99f80a79d8824d2805114b8b067e9823 to < 1697fb124c6d6c5237e9cbd78890310154738084affected24afd80d99f80a79d8824d2805114b8b067e9823 to < 8d09065802c53cc938d162b62f6c4150b392c90eaffected24afd80d99f80a79d8824d2805114b8b067e9823 to < 11141630f03efffdfe260b3582b2d93d38171b97affected24afd80d99f80a79d8824d2805114b8b067e9823 to < 3481dec5ecbbbbe44ab23e22c2b14bd65c644ec6affected24afd80d99f80a79d8824d2805114b8b067e9823 to < 4f82e7e07cdaf2947d71968e3d6b73370a217093affected24afd80d99f80a79d8824d2805114b8b067e9823 to < 26208a7cffd0c7cbf14237ccd20c7270b3ffeb7eaffected
Linux Linux
Default version status: affected
3.3affected0 to < 3.3unaffected4.14.315 to ≤ 4.14.*unaffected4.19.283 to ≤ 4.19.*unaffected5.4.243 to ≤ 5.4.*unaffected5.10.180 to ≤ 5.10.*unaffected5.15.111 to ≤ 5.15.*unaffected6.1.28 to ≤ 6.1.*unaffected6.2.15 to ≤ 6.2.*unaffected6.3.2 to ≤ 6.3.*unaffected6.4 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/cb827ed2bb34480dc102146d3a1f89fdbcafc028 ↗
- https://git.kernel.org/stable/c/1d2c6c6e37fe5de11fd01a82badf03390e12df7a ↗
- https://git.kernel.org/stable/c/8c5d5d7ffd1e76734811b8ea5417cf0432b9952c ↗
- https://git.kernel.org/stable/c/1697fb124c6d6c5237e9cbd78890310154738084 ↗
- https://git.kernel.org/stable/c/8d09065802c53cc938d162b62f6c4150b392c90e ↗
- https://git.kernel.org/stable/c/11141630f03efffdfe260b3582b2d93d38171b97 ↗
- https://git.kernel.org/stable/c/3481dec5ecbbbbe44ab23e22c2b14bd65c644ec6 ↗
- https://git.kernel.org/stable/c/4f82e7e07cdaf2947d71968e3d6b73370a217093 ↗
- https://git.kernel.org/stable/c/26208a7cffd0c7cbf14237ccd20c7270b3ffeb7e ↗