Vulnerability in dm raid: fix KASAN warning in raid5_add_disks
Summary
GSD-2022-1004818: dm raid: fix KASAN warning in raid5_add_disks. Affects Kernel versions < 3553a69bb52be2deba61d0ca064c41aee842bb35. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dm raid package is a component of the Linux Kernel ecosystem. It provides support for software RAID (Redundant Array of Independent Disks) configurations in the device-mapper framework. RAID allows multiple physical disks to be combined into a single logical unit for improved performance, redundancy, or both. The raid5_add_disks function is responsible for adding new disks to a RAID 5 configuration. However, a vulnerability has been discovered in this function that could lead to a KASAN (Kernel Address Sanitizer) warning.
Vulnerability Detail
The vulnerability in dm raid's raid5_add_disks function can trigger a KASAN warning. KASAN is a dynamic memory error detector in the Linux Kernel that helps identify and report memory access bugs. The specific impact and attack plausibility of this vulnerability have not been proven yet. However, it is important to address this issue to ensure the stability and security of RAID configurations. The vulnerability has been fixed in Linux Kernel version v4.19.251 by commit 3553a69bb52be2deba61d0ca064c41aee842bb35.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in dm raid's raid5_add_disks function can trigger a KASAN warning. It is recommended to update the Linux Kernel to version v4.19.251 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dm raid is a component of the Linux Kernel that provides support for software RAID configurations.
RAID 5 is a RAID configuration that combines multiple disks into a single logical unit, providing improved performance and redundancy.
KASAN (Kernel Address Sanitizer) is a dynamic memory error detector in the Linux Kernel that helps identify and report memory access bugs.
The specific impact of this vulnerability has not been proven yet. However, it is important to address it to ensure the stability and security of RAID configurations.
To fix this vulnerability, update the Linux Kernel to version v4.19.251 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
