DEBIAN-CVE-2023-53299

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io fails, recoveryrequestwrite returns without issuing the write io, in...

CVE-2023-53299

CVE-2023-53299 affects the Linux kernel's md/raid10 recovery path. The issue leaks the field r10bio->remaining when a read I/O fails and recovery_request_write() exits early, causing end_sync_request() to run only once and an I/O hang. The documented fix reduces or decrements 'remaining' depen...