Linux Kernel Vulnerability in RAID10 Configuration by Vendor

CVE-2023-53313

What is CVE-2023-53313?

A vulnerability exists within the Linux kernel related to the RAID10 configuration, specifically in the handling of maximum read errors. When entering values into the md/max_read_errors, a lack of proper input validation may lead to overflow conditions, which could compromise data integrity and cause unexpected behavior in the event of read errors. A patch has been implemented to enforce input checks and mitigate this risk.

References