CVE-2024-45023
published 2024-09-11CVE-2024-45023: In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk read_balance() will avoid…
PriorityP427high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.18%
8.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: Fix data corruption for degraded array with slow disk
read_balance() will avoid reading from slow disks as much as possible,
however, if valid data only lands in slow disks, and a new normal disk
is still in recovery, unrecovered data can be read:
raid1_read_request
read_balance
raid1_should_read_first
-> return false
choose_best_rdev
-> normal disk is not recovered, return -1
choose_bb_rdev
-> missing the checking of recovery, return the normal disk
-> read unrecovered data
Root cause is that the checking of recovery is missing in
choose_bb_rdev(). Hence add such checking to fix the problem.
Also fix similar problem in choose_slow_rdev().
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.10.7-1 (forky) | linux 6.10.7-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= dfa8ecd167c1753d4fc24a517e1d79c603183c94 < 2febf5fdbf5d9a52ddc3e986971c8609b1582d67 | 2febf5fdbf5d9a52ddc3e986971c8609b1582d67 |
| linux | linux | >= dfa8ecd167c1753d4fc24a517e1d79c603183c94 < c916ca35308d3187c9928664f9be249b22a3a701 | c916ca35308d3187c9928664f9be249b22a3a701 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.10.7-1 | 6.10.7-1 |
| linux | linux_kernel | >= 0 < 6.10.7-1 | 6.10.7-1 |
| linux | linux_kernel | >= 6.9 < 6.10.7 | 6.10.7 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
osv7.1HIGH
vendor_debian7.1LOW
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: md/raid1: Fix data corruption for degraded array with slow disk
vendor_redhat·2024-09-11·CVSS 7.1
CVE-2024-45023 [HIGH] CWE-494 kernel: md/raid1: Fix data corruption for degraded array with slow disk
kernel: md/raid1: Fix data corruption for degraded array with slow disk
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: Fix data corruption for degraded array with slow disk
read_balance() will avoid reading from slow disks as much as possible,
however, if valid data only lands in slow disks, and a new normal disk
is still in recovery, unrecovered data can be read:
raid1_read_request
read_balance
raid1_should_read_first
-> return false
choose_best_rdev
-> normal disk is not recovered, return -1
choose_bb_rdev
-> missing the checking of recovery, return the normal disk
-> read unrecovered data
Root cause is that the checking of recovery is missing in
choose_bb_rdev(). Hence add such checking to fix the problem.
Also fix similar problem in choose_slow_rdev().
Debian
CVE-2024-45023: linux - In the Linux kernel, the following vulnerability has been resolved: md/raid1: F...
vendor_debian·2024·CVSS 7.1
CVE-2024-45023 [HIGH] CVE-2024-45023: linux - In the Linux kernel, the following vulnerability has been resolved: md/raid1: F...
In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk read_balance() will avoid reading from slow disks as much as possible, however, if valid data only lands in slow disks, and a new normal disk is still in recovery, unrecovered data can be read: raid1_read_request read_balance raid1_should_read_first -> return false choose_best_rdev -> normal disk is not recovered, return -1 choose_bb_rdev -> missing the checking of recovery, return the normal disk -> read unrecovered data Root cause is that the checking of recovery is missing in choose_bb_rdev(). Hence add such checking to fix the problem. Also fix similar problem in choose_slow_rdev().
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed
GHSA
GHSA-p5xc-g9x9-74jh: In the Linux kernel, the following vulnerability has been resolved:
md/raid1: Fix data corruption for degraded array with slow disk
read_balance() w
ghsa_unreviewed·2024-09-11
CVE-2024-45023 [HIGH] CWE-787 GHSA-p5xc-g9x9-74jh: In the Linux kernel, the following vulnerability has been resolved:
md/raid1: Fix data corruption for degraded array with slow disk
read_balance() w
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: Fix data corruption for degraded array with slow disk
read_balance() will avoid reading from slow disks as much as possible,
however, if valid data only lands in slow disks, and a new normal disk
is still in recovery, unrecovered data can be read:
raid1_read_request
read_balance
raid1_should_read_first
-> return false
choose_best_rdev
-> normal disk is not recovered, return -1
choose_bb_rdev
-> missing the checking of recovery, return the normal disk
-> read unrecovered data
Root cause is that the checking of recovery is missing in
choose_bb_rdev(). Hence add such checking to fix the problem.
Also fix similar problem in choose_slow_rdev().
OSV
CVE-2024-45023: In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk read_balance() wil
osv·2024-09-11·CVSS 7.1
CVE-2024-45023 [HIGH] CVE-2024-45023: In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk read_balance() wil
In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk read_balance() will avoid reading from slow disks as much as possible, however, if valid data only lands in slow disks, and a new normal disk is still in recovery, unrecovered data can be read: raid1_read_request read_balance raid1_should_read_first -> return false choose_best_rdev -> normal disk is not recovered, return -1 choose_bb_rdev -> missing the checking of recovery, return the normal disk -> read unrecovered data Root cause is that the checking of recovery is missing in choose_bb_rdev(). Hence add such checking to fix the problem. Also fix similar problem in choose_slow_rdev().
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-11
Published