CVE-2023-53313

Summary

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix wrong setting of max_corr_read_errors

There is no input check when echo md/max_read_errors and overflow might occur. Add check of input number.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < 74050a3fdd4aecfd2cbf74d3c145812ab2744375affected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < 025fde32fb957a5c271711bc66841f817ff5f299affected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < 31c805a44b7569ca1017a4714385182d98bba212affected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < b1d8f38310bce3282374983b229d94edbaf1e570affected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < 3c76920e547d4b931bed758bad83fd658dd88b4eaffected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < 05d10428e8dffed0bac2502f34151729fc189cd3affected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < aef6e98eb772594edd4399625e4e1bbe45971fa1affected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < e83cb411aa1c6c9617db9329897f4506ba9e9b9daffected
LinuxLinux1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d < f8b20a405428803bd9881881d8242c9d72c6b2b2affected
LinuxLinux2.6.33affected
LinuxLinux0 < 2.6.33unaffected
LinuxLinux4.14.322 <= 4.14.*unaffected
LinuxLinux4.19.291 <= 4.19.*unaffected
LinuxLinux5.4.251 <= 5.4.*unaffected
LinuxLinux5.10.188 <= 5.10.*unaffected
LinuxLinux5.15.121 <= 5.15.*unaffected
LinuxLinux6.1.39 <= 6.1.*unaffected
LinuxLinux6.3.13 <= 6.3.*unaffected
LinuxLinux6.4.4 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References