NetSight
IP …
high7.1

CVE-2023-53357

In the Linux kernel, the following vulnerability has been resolved: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter If we write a large number to …

Impact

In the Linux kernel, the following vulnerability has been resolved: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter If we write a large number to md/bitmap_set_bits, md_bitmap_checkpage() will return -EINVAL because 'page >= bitmap->pages', but the return value was not checked immediately in md_bitmap_get_counter() in order to set *blocks value and slab-out-of-bounds occurs. Move check of 'page >= bitmap->pages' to md_bitmap_get_counter() and return directly if true.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.36 before 4.19.291
from 4.20 before 5.4.251
from 5.5 before 5.10.188
from 5.11 before 5.15.121
from 5.16 before 6.1.39
from 6.2 before 6.3.13

Weakness classification

CWE-125

References