md/raid10: fix wrong setting of max_corr_read_errors
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.1%
exploitation probability
0.1%top 95% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix wrong setting of max_corr_read_errors
There is no input check when echo md/max_read_errors and overflow might
occur. Add check of input number.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/025fde32fb957a5c271711bc66841f817ff5f299https://git.kernel.org/stable/c/05d10428e8dffed0bac2502f34151729fc189cd3https://git.kernel.org/stable/c/31c805a44b7569ca1017a4714385182d98bba212https://git.kernel.org/stable/c/3c76920e547d4b931bed758bad83fd658dd88b4ehttps://git.kernel.org/stable/c/74050a3fdd4aecfd2cbf74d3c145812ab2744375https://git.kernel.org/stable/c/aef6e98eb772594edd4399625e4e1bbe45971fa1https://git.kernel.org/stable/c/b1d8f38310bce3282374983b229d94edbaf1e570https://git.kernel.org/stable/c/e83cb411aa1c6c9617db9329897f4506ba9e9b9dhttps://git.kernel.org/stable/c/f8b20a405428803bd9881881d8242c9d72c6b2b2