In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5_add_disks There's a KASAN warning in raid5_add_disk when running the LVM testsuite. The warning happens in the test lvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning by verifying that rdev->saved_raid_disk is within limits.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-425.3.1.el8 cpe:/o:redhat:enterprise_linux:8 RHSA-2022:7683 2022-11-08T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-162.6.1.el9_1 cpe:/a:redhat:enterprise_linux:9 RHSA-2022:8267 2022-11-15T00:00:00Z
kernel-0:5.14.0-162.6.1.el9_1 cpe:/o:redhat:enterprise_linux:9 RHSA-2022:8267 2022-11-15T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/02cffb1921edadd9b6e4eee7ada4a5213e8ba12e cve-icon cve-icon
https://git.kernel.org/stable/c/2d4e7c9898c20fb3d3f55381cab601761aab7d64 cve-icon cve-icon
https://git.kernel.org/stable/c/2fb2928728038280bd925ce2aafb4997e9d47ee9 cve-icon cve-icon
https://git.kernel.org/stable/c/3553a69bb52be2deba61d0ca064c41aee842bb35 cve-icon cve-icon
https://git.kernel.org/stable/c/617b365872a247480e9dcd50a32c8d1806b21861 cve-icon cve-icon
https://git.kernel.org/stable/c/d5b06039b195d4b6f94f5d345b1e4ac1975a9832 cve-icon cve-icon
https://git.kernel.org/stable/c/d8bca518d5272fe349e0a722fdb9e3acb661f3f0 cve-icon cve-icon
https://git.kernel.org/stable/c/f157bd9cf377a947fdb7035e69466b6ecdc17c17 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022624-CVE-2022-49673-0197@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49673 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49673 cve-icon
History

Wed, 30 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Tue, 29 Apr 2025 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

threat_severity

Low

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5_add_disks There's a KASAN warning in raid5_add_disk when running the LVM testsuite. The warning happens in the test lvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning by verifying that rdev->saved_raid_disk is within limits.
Title dm raid: fix KASAN warning in raid5_add_disks
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T02:24:05.945Z

Updated: 2025-05-04T08:43:02.339Z

Reserved: 2025-02-26T02:21:30.437Z

Link: CVE-2022-49673

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-02-26T07:01:42.223

Modified: 2025-02-26T07:01:42.223

Link: CVE-2022-49673

cve-icon Redhat

Severity : Low

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49673 - Bugzilla