]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
dm-raid: fix possible NULL dereference with undefined raid type
authorAlexey Simakov <bigalex934@gmail.com>
Tue, 2 Dec 2025 17:18:38 +0000 (20:18 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 18 Dec 2025 13:03:40 +0000 (14:03 +0100)
commit992710902de453ecd7c1a54352fcf3243ef5d855
treed72f36f7d8a19f720e94ac3cdee2e6ed3b7e36d0
parentf80cf70de9121ea689e88a67c51e68fe2821ae29
dm-raid: fix possible NULL dereference with undefined raid type

[ Upstream commit 2f6cfd6d7cb165a7af8877b838a9f6aab4159324 ]

rs->raid_type is assigned from get_raid_type_by_ll(), which may return
NULL. This NULL value could be dereferenced later in the condition
'if (!(rs_is_raid10(rs) && rt_is_raid0(rs->raid_type)))'.

Add a fail-fast check to return early with an error if raid_type is NULL,
similar to other uses of this function.

Found by Linux Verification Center (linuxtesting.org) with Svace.

Fixes: 33e53f06850f ("dm raid: introduce extended superblock and new raid types to support takeover/reshaping")
Signed-off-by: Alexey Simakov <bigalex934@gmail.com>
Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/md/dm-raid.c