Linux Kernel Slab-out-of-Bounds Vulnerability in RAID10 Implementation

CVE-2023-53357

What is CVE-2023-53357?

A vulnerability in the Linux kernel's RAID10 implementation could allow an attacker to exploit the md_bitmap_get_counter function. When a large value is written to md/bitmap_set_bits, the system may face a slab-out-of-bounds situation due to improper error handling within the md_bitmap_get_counter function. By failing to check if the page exceeds the allocated bitmap pages, the function risks manipulating memory incorrectly, potentially leading to system instabilities and security concerns.

References