CVE-2021-46950

md/raid1: properly indicate failure when ending a failed write request

State: Published
Severity: 7.8 High
Published: Feb 27, 2024
Updated: May 23, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: properly indicate failure when ending a failed write request

This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being cleared.

Since we are in the failure leg of raid1_end_write_request, the request either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	900c531899f5ee2321bef79e20055787bc73251d to before 12216d0919b64ee2ea5dc7a50e455670f44383d5Affected 1cd972e0a10760a1fa27d9830d78446c891c23b6 to before a6e17cab00fc5bf85472434c52ac751426257c6fAffected eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 6920cef604fa57f9409e3960413e9cc11f5c5a40Affected eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 661061a45e32d8b2cc0e306da9f169ad44011382Affected eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 59452e551784b7a57a45d971727e9db63b192515Affected eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 538244fba59fde17186322776247cd9c05be86ddAffected eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 2417b9869b81882ab90fd5ed1081a1cb2d4db1ddAffected a1f4fcb880988a96c0b2d5c3305ffc4e49eca0edAffected 344242d50f468a250bf4b6136934392758412ed8Affected 4.14.147 to before 4.14.233Affected 4.19.77 to before 4.19.191Affected 5.2.19 to before 5.3Affected 5.3.4 to before 5.4Affected
LinuxLinux	5.4Affected before 5.4Not affected 4.14.233 through 4.14.Not affected 4.19.191 through 4.19.Not affected 5.4.118 through 5.4.Not affected 5.10.36 through 5.10.Not affected 5.11.20 through 5.11.Not affected 5.12.3 through 5.12.Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

900c531899f5ee2321bef79e20055787bc73251d to before 12216d0919b64ee2ea5dc7a50e455670f44383d5Affected
1cd972e0a10760a1fa27d9830d78446c891c23b6 to before a6e17cab00fc5bf85472434c52ac751426257c6fAffected
eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 6920cef604fa57f9409e3960413e9cc11f5c5a40Affected
eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 661061a45e32d8b2cc0e306da9f169ad44011382Affected
eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 59452e551784b7a57a45d971727e9db63b192515Affected
eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 538244fba59fde17186322776247cd9c05be86ddAffected
eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad to before 2417b9869b81882ab90fd5ed1081a1cb2d4db1ddAffected
a1f4fcb880988a96c0b2d5c3305ffc4e49eca0edAffected
344242d50f468a250bf4b6136934392758412ed8Affected
4.14.147 to before 4.14.233Affected
4.19.77 to before 4.19.191Affected
5.2.19 to before 5.3Affected
5.3.4 to before 5.4Affected

LinuxLinux

5.4Affected
before 5.4Not affected
4.14.233 through 4.14.*Not affected
4.19.191 through 4.19.*Not affected
5.4.118 through 5.4.*Not affected
5.10.36 through 5.10.*Not affected
5.11.20 through 5.11.*Not affected
5.12.3 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.