CVE-2023-53313

md/raid10: fix wrong setting of max_corr_read_errors

MEDIUM

5.5

CVSS Score

Published: September 16, 2025 at 04:11 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of max_corr_read_errors There is no input check when echo md/max_read_errors and overflow might occur. Add check of input number.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.33 ≤ v < 4.14.3222.6.33 ≤ v < 4.19.2912.6.33 ≤ v < 5.10.1882.6.33 ≤ v < 5.15.1212.6.33 ≤ v < 5.4.2512.6.33 ≤ v < 6.1.392.6.33 ≤ v < 6.3.132.6.33 ≤ v < 6.4.42.6.33 ≤ v < 6.54.15 ≤ v < 4.19.2914.20 ≤ v < 5.4.2515.11 ≤ v < 5.15.1215.16 ≤ v < 6.1.395.5 ≤ v < 5.10.1886.2 ≤ v < 6.3.136.4 ≤ v < 6.4.41e50915fe0bbf7a46db0fa7e1e604d3fc95f057d2.6.33

Vendor states this is fixed in 025fde32fb957a5c271711bc66841f817ff5f299 (fixed)

Vendor states this is fixed in 05d10428e8dffed0bac2502f34151729fc189cd3 (fixed)

Vendor states this is fixed in 31c805a44b7569ca1017a4714385182d98bba212 (fixed)

Vendor states this is fixed in 3c76920e547d4b931bed758bad83fd658dd88b4e (fixed)

Vendor states this is fixed in 74050a3fdd4aecfd2cbf74d3c145812ab2744375 (fixed)

Vendor states this is fixed in aef6e98eb772594edd4399625e4e1bbe45971fa1 (fixed)

Vendor states this is fixed in b1d8f38310bce3282374983b229d94edbaf1e570 (fixed)

Vendor states this is fixed in e83cb411aa1c6c9617db9329897f4506ba9e9b9d (fixed)

Vendor states this is fixed in f8b20a405428803bd9881881d8242c9d72c6b2b2 (fixed)

Vendor states this is fixed in 2.6.33 (unaffected)

Vendor states this is fixed in 4.14.322 (unaffected)

Vendor states this is fixed in 4.19.291 (unaffected)

Vendor states this is fixed in 5.10.188 (unaffected)

Vendor states this is fixed in 5.15.121 (unaffected)

Vendor states this is fixed in 5.4.251 (unaffected)

Vendor states this is fixed in 6.1.39 (unaffected)

Vendor states this is fixed in 6.3.13 (unaffected)

Vendor states this is fixed in 6.4.4 (unaffected)

Vendor states this is fixed in 6.5 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references