drbd: Fix Potential Silent Data Corruption in Kernel
Summary
GSD-2022-1002124: drbd: fix potential silent data corruption. Affects Kernel versions < fde8c5cad0881fb899a104a187c80fb8cfc8af97. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drbd package is a distributed replicated block device driver for Linux. It allows mirroring of data between multiple nodes in a cluster, ensuring high availability and data redundancy. The package is commonly used in scenarios where data integrity and reliability are critical, such as in storage systems and virtualization environments. However, a vulnerability has been discovered in the drbd package that could potentially lead to silent data corruption.
Vulnerability Detail
The vulnerability in the drbd package could result in silent data corruption. While the exact attack vector and impact have not been proven, the potential for data integrity issues exists. This vulnerability has been assigned the ID GSD-2022-1002124. It has been fixed in the Linux Kernel version v5.10.110 by commit fde8c5cad0881fb899a104a187c80fb8cfc8af97. For more details, please refer to the references link provided.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The drbd package in the Linux Kernel has been found to have a vulnerability that could potentially result in silent data corruption. It is crucial to update the kernel to version v5.10.110 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drbd package is a distributed replicated block device driver for Linux that enables data mirroring between multiple nodes in a cluster.
The vulnerability could potentially lead to silent data corruption, compromising the integrity of the mirrored data.
There is no evidence of this vulnerability being exploited in the wild at the time of discovery.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and the tool will provide real-time alerts for open-source vulnerabilities.
For more information about the fix, including the specific commit in the Linux Kernel repository, please refer to the provided references link.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
