NetSight
high7.8

CVE-2022-50085

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raid_resume There is a KASAN warning in raid_resu…

Impact

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raid_resume There is a KASAN warning in raid_resume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev->raid_disks is greater than rs->raid_disks, so the loop touches one entry beyond the allocated length.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.8 before 4.14.291
from 4.15 before 4.19.256
from 4.20 before 5.4.211
from 5.5 before 5.10.137
from 5.11 before 5.15.61
from 5.16 before 5.18.18

References