CVE-2023-53313

md/raid10: fix wrong setting of max_corr_read_errors

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix wrong setting of max_corr_read_errors

There is no input check when echo md/max_read_errors and overflow might occur. Add check of input number.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 74050a3fdd4aecfd2cbf74d3c145812ab2744375Affected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 025fde32fb957a5c271711bc66841f817ff5f299Affected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 31c805a44b7569ca1017a4714385182d98bba212Affected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before b1d8f38310bce3282374983b229d94edbaf1e570Affected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 3c76920e547d4b931bed758bad83fd658dd88b4eAffected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 05d10428e8dffed0bac2502f34151729fc189cd3Affected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before aef6e98eb772594edd4399625e4e1bbe45971fa1Affected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before e83cb411aa1c6c9617db9329897f4506ba9e9b9dAffected 1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before f8b20a405428803bd9881881d8242c9d72c6b2b2Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 4.14.322 through 4.14.Not affected 4.19.291 through 4.19.Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 74050a3fdd4aecfd2cbf74d3c145812ab2744375Affected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 025fde32fb957a5c271711bc66841f817ff5f299Affected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 31c805a44b7569ca1017a4714385182d98bba212Affected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before b1d8f38310bce3282374983b229d94edbaf1e570Affected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 3c76920e547d4b931bed758bad83fd658dd88b4eAffected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before 05d10428e8dffed0bac2502f34151729fc189cd3Affected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before aef6e98eb772594edd4399625e4e1bbe45971fa1Affected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before e83cb411aa1c6c9617db9329897f4506ba9e9b9dAffected
1e50915fe0bbf7a46db0fa7e1e604d3fc95f057d to before f8b20a405428803bd9881881d8242c9d72c6b2b2Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
4.14.322 through 4.14.*Not affected
4.19.291 through 4.19.*Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.