CVE-2024-23307
md/raid5: fix atomicity violation in raid5_cache_count
References
Notes
carnil> CVE description reads as "Integer Overflow or Wraparound
carnil> vulnerability in Linux Linux kernel kernel on Linux, x86, ARM
carnil> (md, raid, raid5 modules) allows Forced Integer Overflow."
carnil> which indicates together with the affected version (from v4.1-
carnil> rc1 before v6.8-rc1), that it is a upstream Linux kernel issue.
carnil> To date (2024-01-25) the OpenAnolis is restricted.
Bugs
Status
| Branch |
Status |
| 4.19-buster-security |
unknown
|
| 4.19-upstream-stable |
unknown
|
| 5.10-bullseye-security |
unknown
|
| 5.10-upstream-stable |
unknown
|
| 6.1-bookworm-security |
unknown
|
| 6.1-upstream-stable |
unknown
|
| 6.6-upstream-stable |
unknown
|
| 6.8-upstream-stable |
unknown
|
| sid |
unknown
|
| upstream |
released (6.9-rc1) [dfd2bf436709b2bccb78c2dda550dde93700efa7]
|