Fix Potential Silent Data Corruption in drbd
Summary
GSD-2022-1002269: drbd: fix potential silent data corruption. Affects Kernel versions < ded62776302663332a1e7a561649cfb39632cb72. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
drbd is a distributed replicated block device driver for Linux. It allows multiple servers to share the same storage device in a high-availability setup. The driver synchronizes data between servers in real-time, ensuring data consistency and availability. However, a potential vulnerability has been discovered in drbd that could lead to silent data corruption.
Vulnerability Detail
The vulnerability in drbd could result in silent data corruption. Although the impact and attack plausibility have not been proven, it is crucial to address this issue to prevent potential data integrity issues. The vulnerability has been fixed in Linux Kernel version v5.4.189 by commit ded62776302663332a1e7a561649cfb39632cb72.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The potential silent data corruption vulnerability in drbd has been addressed in Linux Kernel version v5.4.189. It is recommended to update the Linux Kernel to the fixed version to prevent any potential data integrity issues. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
drbd is a distributed replicated block device driver for Linux that allows multiple servers to share the same storage device in a high-availability setup.
Silent data corruption refers to the situation where data gets corrupted without any indication or error message. It can lead to data integrity issues and potential data loss.
The actual impact and attack plausibility of the drbd vulnerability have not been proven yet. However, it is essential to address the vulnerability to prevent potential data corruption.
You can check your Linux Kernel version by running the command 'uname -r' in the terminal.
More information about the fix for this vulnerability can be found in the Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
