md/raid5: let stripe batch bm_seq comparison wrap-safe
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The Linux kernel's software RAID 5 driver (md/raid5) is affected. A sequence counter used to order stripe batches can wrap around, causing newer batches to be treated as older, which could lead to incorrect handling of RAID stripe operations.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm_seq can look smaller than old, so .. covert to wrap-safe calculate way.
Timeline
- CVE published
- First seen by cve.now
- Record last updated
Affected versions
- Linux Linux
From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in 647c7289a3960118e249c0a53da6f1ebba1e47a3; From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in ffdd3aee932fc293456678f6b0200ffe9bf12a6d; From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in 628b14d0744bd5dfe176ea93559071cdcde14255; From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in 2fdc51228d9a8cad2d727d5aef732cc66fc6d56e; From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in c5c89e1a872a84019f674f5107111e6e6b7cc30f; From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in cc8eb1715673de850f14376782151f68f73ae3ce; From 2b6b24574256c05be145936f1493aec74c6904e5 · fixed in 00e93faf4cea9e8802ac5dfee0952d84fc95c40f
- Linux Linux
4.1
- KernelLinux
fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53
References 7
git.kernel.org
- stable/c/647c7289a3960118e249c0a53da6f1ebba1e47a3
- stable/c/ffdd3aee932fc293456678f6b0200ffe9bf12a6d
- stable/c/628b14d0744bd5dfe176ea93559071cdcde14255
- stable/c/2fdc51228d9a8cad2d727d5aef732cc66fc6d56e
- stable/c/c5c89e1a872a84019f674f5107111e6e6b7cc30f
- stable/c/cc8eb1715673de850f14376782151f68f73ae3ce
- stable/c/00e93faf4cea9e8802ac5dfee0952d84fc95c40f