In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix null-ptr-deref of mreplace in raid10syncrequest
There are two check of 'mreplace' in raid10syncrequest(). In the first check, 'needreplace' will be set and 'mreplace' will be used later if no-Faulty 'mreplace' exists, In the second check, 'mreplace' will be set to NULL if it is Faulty, but 'needreplace' will not be changed accordingly. null-ptr-deref occurs if Faulty is set between two check.
Fix it by merging two checks into one. And replace 'need_replace' with 'mreplace' because their values are always the same.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@222cc459d59857ee28a5366dc225ab42b22f9272",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-07272730",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@222cc459d59857ee28a5366dc225ab42b22f9272",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-09cbafdc",
"signature_version": "v1",
"digest": {
"length": 11593.0,
"function_hash": "286871225768561982223794451453018423185"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45fa023b3334a7ae6f6c4eb977295804222dfa28",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-0efe6e1e",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2990e2ece18dd4cca71b3109c80517ad94adb065",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-15093ea0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4f",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-188e484f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2990e2ece18dd4cca71b3109c80517ad94adb065",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-1bd91ce0",
"signature_version": "v1",
"digest": {
"length": 11593.0,
"function_hash": "286871225768561982223794451453018423185"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34817a2441747b48e444cb0e05d84e14bc9443da",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-2d191168",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4f",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-341b1596",
"signature_version": "v1",
"digest": {
"length": 11593.0,
"function_hash": "286871225768561982223794451453018423185"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5015b97adda6a24dd3e713c63e521ecbeff25c6",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-42669fd9",
"signature_version": "v1",
"digest": {
"length": 11558.0,
"function_hash": "280271511333751278904748060625265209065"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45fa023b3334a7ae6f6c4eb977295804222dfa28",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-a64a371c",
"signature_version": "v1",
"digest": {
"length": 11593.0,
"function_hash": "286871225768561982223794451453018423185"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34817a2441747b48e444cb0e05d84e14bc9443da",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-abfbaa04",
"signature_version": "v1",
"digest": {
"length": 11653.0,
"function_hash": "14012663679419122085246022206919172473"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@144c7fd008e0072b0b565f1157eec618de54ca8a",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-ac115dc3",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@144c7fd008e0072b0b565f1157eec618de54ca8a",
"target": {
"function": "raid10_sync_request",
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-b8f7cbda",
"signature_version": "v1",
"digest": {
"length": 11558.0,
"function_hash": "280271511333751278904748060625265209065"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5015b97adda6a24dd3e713c63e521ecbeff25c6",
"target": {
"file": "drivers/md/raid10.c"
},
"deprecated": false,
"id": "CVE-2023-53380-fb730926",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156957426122046457756954579477054502213",
"13135402058391126505489777565247251535",
"242955594639693412643074532899281393570",
"267045927386902378358849151114096267086",
"18752715061258710822020732517001429679",
"51100446137839737759637102422004682052",
"265783112221204951640119731589659741405",
"165190274071215536630337328372276429514",
"75922767084781907931479701858899081821",
"170561218420587927559599679624409261590",
"164170210596053214010597313435909325296",
"157216342276858233249506673252386757126",
"166881686353443853551916350770082578218",
"169319605184864584085315889452182617076",
"64164003163259396477171848571492545487",
"183107959611875323271935484729827184826",
"100420480302755175431865328189373490898",
"30417759353405219265409193522908310981",
"306355478934655130051597653530667463934",
"239006144500811610234651308243180892471"
]
},
"signature_type": "Line"
}
]