7.8

CVE-2021-46950

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: properly indicate failure when ending a failed write request

This patch addresses a data corruption bug in raid1 arrays using bitmaps.
Without this fix, the bitmap bits for the failed I/O end up being cleared.

Since we are in the failure leg of raid1_end_write_request, the request
either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).
Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.14.147 < 4.14.233
Linux ≫ Linux Kernel Version >= 4.19.77 < 4.19.191
Linux ≫ Linux Kernel Version >= 5.2.19 < 5.3
Linux ≫ Linux Kernel Version >= 5.3.4 < 5.4.118
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.36
Linux ≫ Linux Kernel Version >= 5.11 < 5.11.20
Linux ≫ Linux Kernel Version >= 5.12 < 5.12.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.025
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H