Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drivers:md: fix a potential use-after-free bug At line 2884, the statement "raid5releasestripesh;" removes the reference to sh, which may cause sh to be released. However, sh is later used in line 2886, where it appears in the...

ROS-20260925-73-0012

The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260923-73-0081

The vulnerability of the raid1removedisk function in the drivers/md/raid1.c module of the Linux device driver suite, which handles multiple devices such as RAID and LVM, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the drivers/md components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drivers/md components of the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

WS-2021-0529

Linux/Kernel is vulnerable to use after free in rebalancechildren in emspcmciaaddcard in drivers/md/persistent-data/dm-btree-remove.c...

The vulnerability of the drivers/md components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drivers/md components of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-54661

Уязвимость функции mddev unlock модуля drivers/md/md.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-50402: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: check the return value of mdbitmapgetcounter Check the return value of mdbitmapgetcounter in case it returns NULL pointer, which will result in a null pointer dereference. v2: update the check to include oth...

PT-2025-48909

Уязвимость компонента drivers/md/dm-crypt.c ядра операционной системы Linux связана c взаимной блокировкой потоков выполнения. Эксплуатация уязвимости позволяет нарушителю нарушить оказать воздействие на целостность и доступность защищаемой информации...

PT-2025-48901

Уязвимость компонента drivers/md ядра операционной системы Linux связана c взаимной блокировкой потоков выполнения. Эксплуатация уязвимости позволяет нарушителю вызвать отказ в обслуживании...

EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2024-2205)

"According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the priv-lock while...

CVE-2024-43820

In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARNONONCE check for syncthread in raidresume rm-raid devices will occasionally trigger the following warning when being resumed after a table load because DMRECOVERYRUNNING is set: WARNING: CPU: 7 PID: 5660 at...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1837)

"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the priv-lock while iterating the...

The vulnerability of the raid1_write_request() function in the Linux kernel driver allows a hacker to cause a service failure.

The vulnerability of the raid1writerequest function in the drivers/md/raid1.c file of the Linux kernel’s RAID driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6726-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6726-1 advisory. Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request,...

PT-2024-41783

Уязвимость функции raid message модуля drivers/md/dm-raid.c драйвера поддержки нескольких устройств RAID и LVM ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Fedora 39 : kernel (2024-88847bc77a)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-88847bc77a advisory. The 6.7.5 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

PT-2024-41609

Уязвимость функции md start sync модуля drivers/md/md.c - драйвера поддержки нескольких устройств RAID и LVM ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

CVE-2023-52429

CVE-2023-52429 affects the Linux kernel driver path drivers/md/dm-table.c. The issue arises in dm_table_create’s alloc_targets path where, due to a missing check for struct dm_ioctl.target_count, it can allocate more than INT_MAX bytes and crash. Public sources in connected Nessus plugins confirm...

CVE-2023-52429

dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in alloctargets allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount...