CVE-2021-46950

Summary

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: properly indicate failure when ending a failed write request

This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared.

Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).

Affected Software

VendorProductVersion RangeStatus
LinuxLinux900c531899f5ee2321bef79e20055787bc73251d < 12216d0919b64ee2ea5dc7a50e455670f44383d5affected
LinuxLinux1cd972e0a10760a1fa27d9830d78446c891c23b6 < a6e17cab00fc5bf85472434c52ac751426257c6faffected
LinuxLinuxeeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad < 6920cef604fa57f9409e3960413e9cc11f5c5a40affected
LinuxLinuxeeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad < 661061a45e32d8b2cc0e306da9f169ad44011382affected
LinuxLinuxeeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad < 59452e551784b7a57a45d971727e9db63b192515affected
LinuxLinuxeeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad < 538244fba59fde17186322776247cd9c05be86ddaffected
LinuxLinuxeeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad < 2417b9869b81882ab90fd5ed1081a1cb2d4db1ddaffected
LinuxLinuxa1f4fcb880988a96c0b2d5c3305ffc4e49eca0edaffected
LinuxLinux344242d50f468a250bf4b6136934392758412ed8affected
LinuxLinux4.14.147 < 4.14.233affected
LinuxLinux4.19.77 < 4.19.191affected
LinuxLinux5.2.19 < 5.3affected
LinuxLinux5.3.4 < 5.4affected
LinuxLinux5.4affected
LinuxLinux0 < 5.4unaffected
LinuxLinux4.14.233 <= 4.14.*unaffected
LinuxLinux4.19.191 <= 4.19.*unaffected
LinuxLinux5.4.118 <= 5.4.*unaffected
LinuxLinux5.10.36 <= 5.10.*unaffected
LinuxLinux5.11.20 <= 5.11.*unaffected
LinuxLinux5.12.3 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References