dm raid: Fix accesses beyond end of raid member array
Summary
GSD-2022-1004613: dm raid: fix accesses beyond end of raid member array. Affects Kernel versions < 9bf2b0757b04c78dc5d6e3a198acca98457b32a1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dm raid package is a component of the Linux Kernel that provides support for RAID (Redundant Array of Independent Disks) devices in the device-mapper framework. RAID allows multiple physical disks to be combined into a single logical unit, providing improved performance, fault tolerance, or both. The dm raid package is responsible for managing these RAID devices.
The vulnerability in dm raid allows for accesses beyond the end of the raid member array, potentially leading to memory corruption or other security issues.
Vulnerability Detail
The vulnerability in dm raid arises from improper array boundary checks, which can result in accessing memory beyond the allocated space for the raid member array. This can be exploited by an attacker to manipulate memory contents, potentially leading to arbitrary code execution or denial of service.
The impact of this vulnerability depends on the specific usage of dm raid in the system. If an attacker can trigger the vulnerable code path, they may be able to gain elevated privileges, crash the system, or tamper with data.
The vulnerability was fixed in Linux Kernel version v5.10.129 by commit 9bf2b0757b04c78dc5d6e3a198acca98457b32a1.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible by updating the Linux Kernel.
Conclusion
The vulnerability in dm raid that allowed accesses beyond the end of the raid member array has been fixed in Linux Kernel version v5.10.129. Users are advised to update their Linux Kernel to the fixed version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dm raid is a component of the Linux Kernel that provides support for RAID devices in the device-mapper framework.
The impact of this vulnerability depends on the specific usage of dm raid in the system. If exploited, it could lead to arbitrary code execution, privilege escalation, system crashes, or data tampering.
To fix this vulnerability, update the Linux Kernel to version v5.10.129 or later.
No, there is no known workaround for this vulnerability. It is recommended to update the Linux Kernel.
For more information, refer to the vulnerability details in the Open Source Vulnerability database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1004xxx/GSD-2022-1004613.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
