CVE-2023-53210

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer dereference issue was identified in the r5l flush stripe to raid() function within the md/raid5-cache module of the Linux kernel. The issue occurs because the flushing ios list is cleared before the associated bio structure is cleared, leading to a potential null-pointer dereference when a new flush I/O is submitted. Specifically, the r5l log flush endio() function clears the list first and then clears the bio, which can cause a null-pointer dereference when submit bio is called. The sequence involves submitting a flush I/O, handling active stripes, adding an io end ios to the list, initializing a bio, submitting the bio, and then, in a separate thread, clearing the list and bio before a new flush I/O is submitted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.