CVE-2021-46950
md/raid1: properly indicate failure when ending a failed write request
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.14.233, 4.19.191, 5.3, 5.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared. Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 4.14.147 · fixed in 4.14.233; From 4.19.77 · fixed in 4.19.191; From 5.2.19 · fixed in 5.3; From 5.3.4 · fixed in 5.4
- Linux Linux
5.4
References 7
git.kernel.org
- stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5
- stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f
- stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40
- stable/c/661061a45e32d8b2cc0e306da9f169ad44011382
- stable/c/59452e551784b7a57a45d971727e9db63b192515
- stable/c/538244fba59fde17186322776247cd9c05be86dd
- stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd