Description
In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failures raid1_make_request() acquires a writes_pending reference with md_write_start() before calling raid1_write_request(). Several failure paths in raid1_write_request() complete the bio and return without reaching the normal write completion path, causing the corresponding md_write_end() to be skipped. Make raid1_write_request() return a status indicating whether the write request was successfully queued. This allows raid1_make_request() to call md_write_end() when raid1_write_request() fails. Additionally, if wait_blocked_rdev() fails after wait_barrier() succeeds, the associated barrier reference is not released. Call allow_barrier() before returning from that path to keep the barrier accounting balanced.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5aa705039c4fca84575539bfa2b8a28454a3d2ca to < 874f54243d881fde1890849000beb88a7880d1ecaffected5aa705039c4fca84575539bfa2b8a28454a3d2ca to < 921e2baa626d1504bf30295816aaeb90ac8c82f4affected5aa705039c4fca84575539bfa2b8a28454a3d2ca to < a846affa813013204d0cce0cfdaeb99e8fcce188affected5aa705039c4fca84575539bfa2b8a28454a3d2ca to < 7a450460687919e79b5f8503bdeb13ecf4cca311affected5aa705039c4fca84575539bfa2b8a28454a3d2ca to < bffbbfcbd9393e315a7a4286dcd70e875265db9aaffected5aa705039c4fca84575539bfa2b8a28454a3d2ca to < 8e065a1602511282fc0da2dc89445e0eb71a681caffected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/874f54243d881fde1890849000beb88a7880d1ec ↗
- https://git.kernel.org/stable/c/921e2baa626d1504bf30295816aaeb90ac8c82f4 ↗
- https://git.kernel.org/stable/c/a846affa813013204d0cce0cfdaeb99e8fcce188 ↗
- https://git.kernel.org/stable/c/7a450460687919e79b5f8503bdeb13ecf4cca311 ↗
- https://git.kernel.org/stable/c/bffbbfcbd9393e315a7a4286dcd70e875265db9a ↗
- https://git.kernel.org/stable/c/8e065a1602511282fc0da2dc89445e0eb71a681c ↗