CVE-2024-23307
md/raid5: fix atomicity violation in raid5_cache_count
References
Notes
carnil> CVE description reads as "Integer Overflow or Wraparound
carnil> vulnerability in Linux Linux kernel kernel on Linux, x86, ARM
carnil> (md, raid, raid5 modules) allows Forced Integer Overflow."
carnil> which indicates together with the affected version (from v4.1-
carnil> rc1 before v6.8-rc1), that it is a upstream Linux kernel issue.
carnil> To date (2024-01-25) the OpenAnolis is restricted.
Bugs
Status
Branch |
Status |
4.19-buster-security |
unknown
|
4.19-upstream-stable |
unknown
|
5.10-bullseye-security |
unknown
|
5.10-upstream-stable |
unknown
|
6.1-bookworm-security |
unknown
|
6.1-upstream-stable |
unknown
|
6.6-upstream-stable |
unknown
|
6.8-upstream-stable |
unknown
|
sid |
unknown
|
upstream |
released (6.9-rc1) [dfd2bf436709b2bccb78c2dda550dde93700efa7]
|