Description
In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1_remove_disk() If rddev->raid_disk is greater than mddev->raid_disks, there will be an out-of-bounds in raid1_remove_disk(). We have already found similar reports as follows: 1) commit d17f744e883b ("md-raid10: fix KASAN warning") 2) commit 1ebc2cec0b7d ("dm raid: fix KASAN warning in raid5_remove_disk") Fix this bug by checking whether the "number" variable is valid.
References (8)
Core 8
Core References
Scores
EPSS
0.0020
EPSS Percentile
9.8%
Details
Status
published
Products (25)
linux/Kernel
3.3.0 - 4.14.326linux
linux/Kernel
4.15.0 - 4.19.295linux
linux/Kernel
4.20.0 - 5.4.257linux
linux/Kernel
5.11.0 - 5.15.133linux
linux/Kernel
5.16.0 - 6.1.55linux
linux/Kernel
5.5.0 - 5.10.197linux
linux/Kernel
6.2.0 - 6.5.5linux
Linux/Linux
< 3.3
Linux/Linux
3.3
Linux/Linux
4.14.326 - 4.14.*
... and 15 more
Published
Oct 22, 2025
Tracked Since
Feb 18, 2026