Potential Silent Data Corruption in drbd
Summary
GSD-2022-1002448: drbd: fix potential silent data corruption. Affects Kernel versions < 0452d32bfb419df65f8e200f5ddbf460fef48082. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
drbd is a distributed replicated storage system for the Linux kernel. It allows block devices to be mirrored over a network, ensuring data redundancy and high availability. The vulnerability in drbd could lead to potential silent data corruption, where data integrity is compromised without any visible indication. This vulnerability has been identified and fixed in the Linux Kernel version v4.14.276.
Vulnerability Detail
The potential silent data corruption vulnerability in drbd arises from a specific code implementation. Although the impact and attack plausibility have not been proven, the vulnerability has the potential to compromise data integrity. This means that data stored and replicated using drbd may become corrupted without any visible signs, leading to potential data loss or incorrect data interpretation. The vulnerability has been addressed in the Linux Kernel version v4.14.276 through commit 0452d32bfb419df65f8e200f5ddbf460fef48082.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to version v4.14.276 or later.
Conclusion
The potential silent data corruption vulnerability in drbd has been addressed in the Linux Kernel version v4.14.276. To ensure data integrity and mitigate the risk of data corruption, it is recommended to update the Linux Kernel to the fixed version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
drbd is a distributed replicated storage system for the Linux kernel that allows block devices to be mirrored over a network.
The potential silent data corruption vulnerability in drbd could compromise data integrity, leading to potential data loss or incorrect data interpretation.
No, the impact and attack plausibility of the vulnerability have not been proven.
To fix the potential silent data corruption vulnerability, update the Linux Kernel to version v4.14.276 or later.
No specific workaround has been mentioned. It is recommended to apply the fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
