md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
At a glance
Severity
Not available
EPSS
EPSS 0.13 % · percentile 3 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified
Description
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
setup_geo() extracts near_copies (nc) and far_copies (fc) from the
user-provided layout parameter without checking for zero. When fc=0
with the "improved" far set layout selected, 'geo->far_set_size =
disks / fc' triggers a divide-by-zero.
Validate nc and fc immediately after extraction, returning -1 if
either is zero.
