cbcvebase.
CVE-2022-49673
published 2025-02-26

CVE-2022-49673: In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5_add_disks There's a KASAN warning in raid5_add_disk…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.4th percentile
In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5_add_disks There's a KASAN warning in raid5_add_disk when running the LVM testsuite. The warning happens in the test lvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning by verifying that rdev->saved_raid_disk is within limits.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.14-1 (bookworm)linux 5.18.14-1 (bookworm)
linuxlinux
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < 2d4e7c9898c20fb3d3f55381cab601761aab7d642d4e7c9898c20fb3d3f55381cab601761aab7d64
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < 2fb2928728038280bd925ce2aafb4997e9d47ee92fb2928728038280bd925ce2aafb4997e9d47ee9
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < 3553a69bb52be2deba61d0ca064c41aee842bb353553a69bb52be2deba61d0ca064c41aee842bb35
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < f157bd9cf377a947fdb7035e69466b6ecdc17c17f157bd9cf377a947fdb7035e69466b6ecdc17c17
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < d8bca518d5272fe349e0a722fdb9e3acb661f3f0d8bca518d5272fe349e0a722fdb9e3acb661f3f0
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < d5b06039b195d4b6f94f5d345b1e4ac1975a9832d5b06039b195d4b6f94f5d345b1e4ac1975a9832
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < 02cffb1921edadd9b6e4eee7ada4a5213e8ba12e02cffb1921edadd9b6e4eee7ada4a5213e8ba12e
linuxlinux>= 6aea114a728db9296f42102d4885e7fb035de0a9 < 617b365872a247480e9dcd50a32c8d1806b21861617b365872a247480e9dcd50a32c8d1806b21861
linuxlinux_kernel< 4.9.3224.9.322
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.136-15.10.136-1
linuxlinux_kernel>= 0 < 5.18.14-15.18.14-1
linuxlinux_kernel>= 0 < 5.18.14-15.18.14-1
linuxlinux_kernel>= 0 < 5.18.14-15.18.14-1
linuxlinux_kernel>= 4.10 < 4.14.2874.14.287
linuxlinux_kernel>= 4.15 < 4.19.2514.19.251
linuxlinux_kernel>= 4.20 < 5.4.2045.4.204
linuxlinux_kernel>= 5.11 < 5.15.535.15.53
linuxlinux_kernel>= 5.16 < 5.18.105.18.10
linuxlinux_kernel>= 5.5 < 5.10.1295.10.129

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.