]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
dm-raid: fix possible NULL dereference with undefined raid type
authorAlexey Simakov <bigalex934@gmail.com>
Tue, 2 Dec 2025 17:18:38 +0000 (20:18 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 18 Dec 2025 13:00:14 +0000 (14:00 +0100)
commit5306df48c54091e4c2c8eb3cb7da728117bd32cb
treebcf2971cc10d23d75753b38bc830d4b8fcd6dcfa
parent6e6ca189e208ec0fb504a7f11c0e03900536e207
dm-raid: fix possible NULL dereference with undefined raid type

[ Upstream commit 2f6cfd6d7cb165a7af8877b838a9f6aab4159324 ]

rs->raid_type is assigned from get_raid_type_by_ll(), which may return
NULL. This NULL value could be dereferenced later in the condition
'if (!(rs_is_raid10(rs) && rt_is_raid0(rs->raid_type)))'.

Add a fail-fast check to return early with an error if raid_type is NULL,
similar to other uses of this function.

Found by Linux Verification Center (linuxtesting.org) with Svace.

Fixes: 33e53f06850f ("dm raid: introduce extended superblock and new raid types to support takeover/reshaping")
Signed-off-by: Alexey Simakov <bigalex934@gmail.com>
Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/md/dm-raid.c