CVE-2021-46950

md/raid1: properly indicate failure when ending a failed write request

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: properly indicate failure when ending a failed write request

This patch addresses a data corruption bug in raid1 arrays using bitmaps.
Without this fix, the bitmap bits for the failed I/O end up being cleared.

Since we are in the failure leg of raid1_end_write_request, the request
either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: md/raid1: indica correctamente el error al finalizar una solicitud de escritura fallida. Este parche soluciona un error de corrupción de datos en matrices raid1 que utilizan mapas de bits. Sin esta solución, los bits del mapa de bits de la E/S fallida terminan borrándose. Dado que estamos en el tramo fallido de raid1_end_write_request, es necesario volver a intentar la solicitud (R1BIO_WriteError) o fallar (R1BIO_Degraded).

*Credits: N/A

CVSS Scores

NISTv3.1 7.8

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-02-25 CVE Reserved
2024-02-27 CVE Published
2024-04-21 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (12)

URL	Tag	Source
https://git.kernel.org/stable/c/900c531899f5ee2321bef79e20055787bc73251d	Vuln. Introduced
https://git.kernel.org/stable/c/1cd972e0a10760a1fa27d9830d78446c891c23b6	Vuln. Introduced
https://git.kernel.org/stable/c/eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad	Vuln. Introduced
https://git.kernel.org/stable/c/a1f4fcb880988a96c0b2d5c3305ffc4e49eca0ed	Vuln. Introduced
https://git.kernel.org/stable/c/344242d50f468a250bf4b6136934392758412ed8	Vuln. Introduced

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5	2021-05-22
https://git.kernel.org/stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f	2021-05-22
https://git.kernel.org/stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40	2021-05-11
https://git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382	2021-05-11
https://git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515	2021-05-12
https://git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd	2021-05-12
https://git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd	2021-04-23

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.14.147 < 4.14.233 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.14.147 < 4.14.233"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19.77 < 4.19.191 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19.77 < 4.19.191"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.4 < 5.4.118 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4 < 5.4.118"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.4 < 5.10.36 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4 < 5.10.36"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.4 < 5.11.20 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4 < 5.11.20"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.4 < 5.12.3 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4 < 5.12.3"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.4 < 5.13 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4 < 5.13"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				5.2.19 Search vendor "Linux" for product "Linux Kernel" and version "5.2.19"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				5.3.4 Search vendor "Linux" for product "Linux Kernel" and version "5.3.4"		en		Affected