CVE-2022-49673

dm raid: fix KASAN warning in raid5_add_disks

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 02:24 AM UTC
Updated: June 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5_add_disks There's a KASAN warning in raid5_add_disk when running the LVM testsuite. The warning happens in the test lvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning by verifying that rdev->saved_raid_disk is within limits.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 4.9.3222.6.15 ≤ v < 4.14.2872.6.15 ≤ v < 4.19.2512.6.15 ≤ v < 4.9.3222.6.15 ≤ v < 5.10.1292.6.15 ≤ v < 5.15.532.6.15 ≤ v < 5.18.102.6.15 ≤ v < 5.192.6.15 ≤ v < 5.4.2044.10 ≤ v < 4.14.2874.15 ≤ v < 4.19.2514.20 ≤ v < 5.4.2045.11 ≤ v < 5.15.535.16 ≤ v < 5.18.105.5 ≤ v < 5.10.1292.6.155.19 rc15.19 rc25.19 rc35.19 rc46aea114a728db9296f42102d4885e7fb035de0a9
Vendor states this is fixed in 02cffb1921edadd9b6e4eee7ada4a5213e8ba12e (fixed)
Vendor states this is fixed in 2d4e7c9898c20fb3d3f55381cab601761aab7d64 (fixed)
Vendor states this is fixed in 2fb2928728038280bd925ce2aafb4997e9d47ee9 (fixed)
Vendor states this is fixed in 3553a69bb52be2deba61d0ca064c41aee842bb35 (fixed)
Vendor states this is fixed in 617b365872a247480e9dcd50a32c8d1806b21861 (fixed)
Vendor states this is fixed in d5b06039b195d4b6f94f5d345b1e4ac1975a9832 (fixed)
Vendor states this is fixed in d8bca518d5272fe349e0a722fdb9e3acb661f3f0 (fixed)
Vendor states this is fixed in f157bd9cf377a947fdb7035e69466b6ecdc17c17 (fixed)
Vendor states this is fixed in 2.6.15 (unaffected)
Vendor states this is fixed in 4.14.287 (unaffected)
Vendor states this is fixed in 4.19.251 (unaffected)
Vendor states this is fixed in 4.9.322 (unaffected)
Vendor states this is fixed in 5.10.129 (unaffected)
Vendor states this is fixed in 5.15.53 (unaffected)
Vendor states this is fixed in 5.18.10 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.4.204 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/02cffb1921edadd9b6e4eee7ada4a5213e8ba12e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2d4e7c9898c20fb3d3f55381cab601761aab7d64
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2fb2928728038280bd925ce2aafb4997e9d47ee9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3553a69bb52be2deba61d0ca064c41aee842bb35
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/617b365872a247480e9dcd50a32c8d1806b21861
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d5b06039b195d4b6f94f5d345b1e4ac1975a9832
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d8bca518d5272fe349e0a722fdb9e3acb661f3f0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f157bd9cf377a947fdb7035e69466b6ecdc17c17

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card