Description
In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1_remove_disk() If rddev->raid_disk is greater than mddev->raid_disks, there will be an out-of-bounds in raid1_remove_disk(). We have already found similar reports as follows: 1) commit d17f744e883b ("md-raid10: fix KASAN warning") 2) commit 1ebc2cec0b7d ("dm raid: fix KASAN warning in raid5_remove_disk") Fix this bug by checking whether the "number" variable is valid.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b8321b68d1445f308324517e45fb0a5c2b48e271 to < beedf40f73939f248c81802eda08a2a8148ea13eaffectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 91fbd4e75cb573f44d2619a9dc2f9ba927040760affectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 25a68f2286be56fb3a6f9fa0e269c04b5e6c6e24affectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 7993cfc041481a3a9cd4a3858088fc846b8ccaf7affectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 4f96c0665f9f4cf70130c9757750dc43dc679c82affectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 4f7d853b4590fc20e90dd50e346c02811a8c5b08affectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 4bdb92eaf645e312975357adc3c4e9523b6e67f1affectedb8321b68d1445f308324517e45fb0a5c2b48e271 to < 8b0472b50bcf0f19a5119b00a53b63579c8e1e4daffected
Linux Linux
Default version status: affected
3.3affected0 to < 3.3unaffected4.14.326 to ≤ 4.14.*unaffected4.19.295 to ≤ 4.19.*unaffected5.4.257 to ≤ 5.4.*unaffected5.10.197 to ≤ 5.10.*unaffected5.15.133 to ≤ 5.15.*unaffected6.1.55 to ≤ 6.1.*unaffected6.5.5 to ≤ 6.5.*unaffected6.6 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/beedf40f73939f248c81802eda08a2a8148ea13e ↗
- https://git.kernel.org/stable/c/91fbd4e75cb573f44d2619a9dc2f9ba927040760 ↗
- https://git.kernel.org/stable/c/25a68f2286be56fb3a6f9fa0e269c04b5e6c6e24 ↗
- https://git.kernel.org/stable/c/7993cfc041481a3a9cd4a3858088fc846b8ccaf7 ↗
- https://git.kernel.org/stable/c/4f96c0665f9f4cf70130c9757750dc43dc679c82 ↗
- https://git.kernel.org/stable/c/4f7d853b4590fc20e90dd50e346c02811a8c5b08 ↗
- https://git.kernel.org/stable/c/4bdb92eaf645e312975357adc3c4e9523b6e67f1 ↗
- https://git.kernel.org/stable/c/8b0472b50bcf0f19a5119b00a53b63579c8e1e4d ↗