CVE-2021-46950

md/raid1: properly indicate failure when ending a failed write request

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared. Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).

7.8

CVSS

Severity: High

CVSS 3.1 •

EPSS 0.01%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5	patch
https://git.kernel.org/stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f	patch
https://git.kernel.org/stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40	patch
https://git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382	patch
https://git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515	patch
https://git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd	patch
https://git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd	patch

Frequently Asked Questions

What is the severity of CVE-2021-46950?: CVE-2021-46950 has been scored as a high severity vulnerability.
How to fix CVE-2021-46950?: To fix CVE-2021-46950, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-46950 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-46950 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-46950?: CVE-2021-46950 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.