Memory Access Issue in Linux Kernel md-raid10 Component by Linux Foundation

CVE-2022-50211

What is CVE-2022-50211?

A memory access issue has been identified in the md-raid10 component of the Linux kernel, which could lead to a slab-out-of-bounds error during disk removal operations. This vulnerability is triggered when an invalid value is processed in the raid10_remove_disk function, prompting a KASAN (Kernel Address Sanitizer) warning. The bug was encountered during operations involving the Logical Volume Manager (LVM) when running specific tests. Developers have addressed this issue by implementing validation checks to ensure that the appropriate value range is maintained, thereby preventing potential data corruption and system instability.

References