NetSight
IP …
medium5.5

CVE-2023-53299

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10…

Impact

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev. However, if the read io fails, recovery_request_write() returns without issuing the write io, in this case, end_sync_request() is only called once and 'remaining' is leaked, cause an io hang. Fix the problem by decreasing 'remaining' according to if 'bio' and 'repl_bio' is valid.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.3 before 4.14.315
from 4.15 before 4.19.283
from 4.20 before 5.4.243
from 5.5 before 5.10.180
from 5.11 before 5.15.111
from 5.16 before 6.1.28

Weakness classification

CWE-401

References