Threats tagged 'ghsa-6jq9-46p7-p377'

A vulnerability in the Linux kernel's md/raid1 subsystem was fixed involving the creation of a serial pool when adding a new rdev (raid device) to an existing RAID1 array with serialize_policy enabled. The issue caused a kernel oops due to an uninitialized rdev->serial pointer, leading to a crash when serialization was expected. This was observed in kernel version 7.1.3. The flaw was due to a skipped initialization in mddev_create_serial_pool() when adding a new device, which was corrected.