1887 matches found
CVE-2024-23307
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...
CVE-2024-23307 Integer overflow in raid5_cache_count in Linux kernel
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...
CVE-2024-23307
CVE-2024-23307 affects the Linux kernel (md, raid, raid5 modules) with an Integer Overflow or Wraparound vulnerability. The connected Astra/Linux bulletin reproduces the same description but provides no technical details or patch information in the supplied documents. No mitigation details are pr...
CVE-2024-23307: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...
maxView Storage Manager Security Vulnerability
Microsemi maxView Storage Manager is a unified viewing tool from Microsemi that centralizes the management of all Adaptec RAID products. A security vulnerability exists in versions v3.00.23484 through v4.14.00.26064 of maxView Storage Manager that originated from a vulnerability that allows an...
RAID Technology and the importance of disk encryption in data security
Introduction Recently we were engaged by a client experiencing a potential data leak incident. Amidst their expansion, they were constructing a new data centre. Due to pressing business needs, they accelerated the setup of part of their infrastructure. This urgency led to them setting up a Domain...
kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io fails, recoveryrequestwrite returns without issuing the write io, in...
kernel: md: fix soft lockup in status_resync
A logic flaw was found in the Linux kernel Multiple Device software RAID status reporting, where concurrent updates to resynchronization progress can overflow an internal difference calculation. This can cause the progress bar routine to loop excessively and trigger a soft lockup. A local user...
kernel: md/raid10: fix null-ptr-deref in raid10_sync_request
A null pointer dereference flaw was found in the Linux kernel's RAID10 implementation. When recovery is skipped on a clean array, initresync is called but closesync is not, leaving conf-havereplacement incorrectly set to 0. If a replacement device is later added and recovery is triggered, replbio...
kernel: Kernel: Denial of Service due to memory leak in RAID10 functionality
A flaw was found in the Linux kernel. This vulnerability, a memory leak, occurs within the RAID10 functionality when handling certain error conditions. A local attacker with low privileges could exploit this by triggering the specific error path, potentially leading to a denial of service DoS due...
kernel: md/raid10: fix memleak of md thread
A memory leak was found in the MD RAID10 driver. When raid10run fails after setupconf succeeds but before mddev-thread is set, the conf-thread is not freed, leaking kernel thread resources...
kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io fails, recoveryrequestwrite returns without issuing the write io, in...
kernel: md: fix soft lockup in status_resync
A logic flaw was found in the Linux kernel Multiple Device software RAID status reporting, where concurrent updates to resynchronization progress can overflow an internal difference calculation. This can cause the progress bar routine to loop excessively and trigger a soft lockup. A local user...
kernel: md/raid10: fix null-ptr-deref in raid10_sync_request
A null pointer dereference flaw was found in the Linux kernel's RAID10 implementation. When recovery is skipped on a clean array, initresync is called but closesync is not, leaving conf-havereplacement incorrectly set to 0. If a replacement device is later added and recovery is triggered, replbio...
kernel: Kernel: Denial of Service due to memory leak in RAID10 functionality
A flaw was found in the Linux kernel. This vulnerability, a memory leak, occurs within the RAID10 functionality when handling certain error conditions. A local attacker with low privileges could exploit this by triggering the specific error path, potentially leading to a denial of service DoS due...
kernel: md/raid10: fix memleak of md thread
A memory leak was found in the MD RAID10 driver. When raid10run fails after setupconf succeeds but before mddev-thread is set, the conf-thread is not freed, leaking kernel thread resources...
The vulnerability of the RAID array management tool Mdadm, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the RAID array management tool Mdadm is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...
kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io fails, recoveryrequestwrite returns without issuing the write io, in...
kernel: md: fix soft lockup in status_resync
A logic flaw was found in the Linux kernel Multiple Device software RAID status reporting, where concurrent updates to resynchronization progress can overflow an internal difference calculation. This can cause the progress bar routine to loop excessively and trigger a soft lockup. A local user...
kernel: md/raid10: fix null-ptr-deref in raid10_sync_request
A null pointer dereference flaw was found in the Linux kernel's RAID10 implementation. When recovery is skipped on a clean array, initresync is called but closesync is not, leaving conf-havereplacement incorrectly set to 0. If a replacement device is later added and recovery is triggered, replbio...