CVE-2021-46950

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46950
In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared. Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5 Patch
https://git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd Patch
https://git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd Patch
https://git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515 Patch
https://git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382 Patch
https://git.kernel.org/stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40 Patch
https://git.kernel.org/stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

10 Apr 2024, 20:13

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5 - () https://git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5 - Patch
References () https://git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd - () https://git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd - Patch
References () https://git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd - () https://git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd - Patch
References () https://git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515 - () https://git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515 - Patch
References () https://git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382 - () https://git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382 - Patch
References () https://git.kernel.org/stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40 - () https://git.kernel.org/stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40 - Patch
References () https://git.kernel.org/stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f - () https://git.kernel.org/stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f - Patch
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: md/raid1: indica correctamente el error al finalizar una solicitud de escritura fallida. Este parche soluciona un error de corrupción de datos en matrices raid1 que utilizan mapas de bits. Sin esta solución, los bits del mapa de bits de la E/S fallida terminan borrándose. Dado que estamos en el tramo fallido de raid1_end_write_request, es necesario volver a intentar la solicitud (R1BIO_WriteError) o fallar (R1BIO_Degraded).

27 Feb 2024, 19:04

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-27 19:04

Updated : 2024-04-10 20:13

NVD link : CVE-2021-46950

Mitre link : CVE-2021-46950

CVE.ORG link : CVE-2021-46950

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo