CVE-2022-49673 dm raid: fix KASAN warning in raid5_add_disks
A missing bounds check in the Linux kernel's dm raid module can trigger a KASAN warning, potentially leading to a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-49673?
CVE-2022-49673 is a medium-severity vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
dm raid: fix KASAN warning in raid5_add_disks
There's a KASAN warning in raid5_add_disk when running the LVM testsuite. The warning happens in the test lvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning by verifying that rdev->saved_raid_disk is within limits.
Which versions are affected by CVE-2022-49673?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-49673?
Apply the vendor's patch.
Is CVE-2022-49673 being exploited?
There is no known exploitation of CVE-2022-49673 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-49673, GHSA-q593-ph6q-rmqf, UBUNTU-CVE-2022-49673.