Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request There are two check of 'mreplace' in raid10_sync_request(). In the first check, 'need_replace' will be set and 'mreplace' will be used later if no-Faulty 'mreplace' exists, In the second check, 'mreplace' will be set to NULL if it is Faulty, but 'need_replace' will not be changed accordingly. null-ptr-deref occurs if Faulty is set between two check. Fix it by merging two checks into one. And replace 'need_replace' with 'mreplace' because their values are always the same.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ee37d7314a32ab6809eacc3389bad0406c69a81f to < 45fa023b3334a7ae6f6c4eb977295804222dfa28affectedee37d7314a32ab6809eacc3389bad0406c69a81f to < 2990e2ece18dd4cca71b3109c80517ad94adb065affectedee37d7314a32ab6809eacc3389bad0406c69a81f to < f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4faffectedee37d7314a32ab6809eacc3389bad0406c69a81f to < 222cc459d59857ee28a5366dc225ab42b22f9272affectedee37d7314a32ab6809eacc3389bad0406c69a81f to < b5015b97adda6a24dd3e713c63e521ecbeff25c6affectedee37d7314a32ab6809eacc3389bad0406c69a81f to < 144c7fd008e0072b0b565f1157eec618de54ca8aaffectedee37d7314a32ab6809eacc3389bad0406c69a81f to < 34817a2441747b48e444cb0e05d84e14bc9443daaffected
Linux Linux
Default version status: affected
4.20affected0 to < 4.20unaffected5.4.251 to ≤ 5.4.*unaffected5.10.188 to ≤ 5.10.*unaffected5.15.121 to ≤ 5.15.*unaffected6.1.39 to ≤ 6.1.*unaffected6.3.13 to ≤ 6.3.*unaffected6.4.4 to ≤ 6.4.*unaffected6.5 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/45fa023b3334a7ae6f6c4eb977295804222dfa28 ↗
- https://git.kernel.org/stable/c/2990e2ece18dd4cca71b3109c80517ad94adb065 ↗
- https://git.kernel.org/stable/c/f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4f ↗
- https://git.kernel.org/stable/c/222cc459d59857ee28a5366dc225ab42b22f9272 ↗
- https://git.kernel.org/stable/c/b5015b97adda6a24dd3e713c63e521ecbeff25c6 ↗
- https://git.kernel.org/stable/c/144c7fd008e0072b0b565f1157eec618de54ca8a ↗
- https://git.kernel.org/stable/c/34817a2441747b48e444cb0e05d84e14bc9443da ↗