Public bug reported:

BugLink: https://bugs.launchpad.net/bugs/2112519

[Impact]

<placeholder for now>

md/raid1:: dm-0: unrecoverable I/O read error for block 527744
md/raid1:: dm-1: unrecoverable I/O read error for block 527616
md/raid1:: dm-0: unrecoverable I/O read error for block 527744
md/raid1:: dm-1: unrecoverable I/O read error for block 527616
md/raid1:: dm-1: unrecoverable I/O read error for block 527616
md/raid1:: dm-0: unrecoverable I/O read error for block 527744
md/raid1:: dm-1: unrecoverable I/O read error for block 527616
md/raid1:: dm-0: unrecoverable I/O read error for block 527744
BUG: kernel NULL pointer dereference, address: 0000000000000040
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
SMP NOPTI
CPU: 3 PID: 19372 Comm: md_1t889zmbfni_ Kdump: loaded Not tainted 
6.8.0-1029-aws #31-Ubuntu
Hardware name: Amazon EC2 m6a.xlarge/, BIOS 1.0 10/16/2017
RIP: 0010:process_checks+0x25e/0x5e0 [raid1]
Code: 8e 19 01 00 00 48 8b 85 78 ff ff ff b9 08 00 00 00 48 8d 7d 90 49 8b 1c 
c4 49 63 c7 4d 8b 74 c4 50 31 c0 f3 48 ab 48 89 5d 88 <4c> 8b 53 40 45 0f b6 4e 
18 49 8b 76 40 49 81 7e 38 a0 04 7c c0 75
RSP: 0018:ffffb39e8142bcb8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000002 RSI: 0000000000000004 RDI: ffffb39e8142bd50
RBP: ffffb39e8142bd80 R08: ffff9a2e001ea000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff9a2e0cd63280
R13: ffff9a2e50d1f800 R14: ffff9a2e50d1f000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff9a3128780000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000040 CR3: 00000001035b2004 CR4: 00000000003706f0
Call Trace:
 <TASK>
 ? show_regs+0x6d/0x80
 ? __die+0x24/0x80
 ? page_fault_oops+0x99/0x1b0
 ? do_user_addr_fault+0x2e0/0x660
 ? exc_page_fault+0x83/0x190
 ? asm_exc_page_fault+0x27/0x30
 ? process_checks+0x25e/0x5e0 [raid1]
 ? process_checks+0x125/0x5e0 [raid1]
 ? srso_alias_return_thunk+0x5/0xfbef5
 ? ___ratelimit+0xc7/0x130
 sync_request_write+0x1c8/0x1e0 [raid1]
 raid1d+0x13a/0x3f0 [raid1]
 ? srso_alias_return_thunk+0x5/0xfbef5
 md_thread+0xae/0x190
 ? __pfx_autoremove_wake_function+0x10/0x10
 ? __pfx_md_thread+0x10/0x10
 kthread+0xda/0x100
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x47/0x70
 ? __pfx_kthread+0x10/0x10
 ret_from_fork_asm+0x1b/0x30
 </TASK>

[Fix]

This was fixed in 6.15-rc3 with:

commit b7c178d9e57c8fd4238ff77263b877f6f16182ba
Author: Meir Elisha <meir.eli...@volumez.com>
Date:  Tue Apr 8 17:38:08 2025 +0300
Subject: md/raid1: Add check for missing source disk in process_checks()
Link: 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b7c178d9e57c8fd4238ff77263b877f6f16182ba

This has been applied to jammy and plucky already through upstream -stable.
Currently noble and oracular are lagging behind and are not up to the -stable
release with the fix.

[Testcase]

[Where problems can occur]

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Fix Released

** Affects: linux (Ubuntu Jammy)
     Importance: Undecided
         Status: Fix Committed

** Affects: linux (Ubuntu Noble)
     Importance: Medium
     Assignee: Matthew Ruffell (mruffell)
         Status: In Progress

** Affects: linux (Ubuntu Oracular)
     Importance: Medium
     Assignee: Matthew Ruffell (mruffell)
         Status: In Progress

** Affects: linux (Ubuntu Plucky)
     Importance: Undecided
         Status: Fix Committed

** Affects: linux (Ubuntu Questing)
     Importance: Undecided
         Status: Fix Released


** Tags: sts

** Description changed:

+ BugLink: https://bugs.launchpad.net/bugs/2112519
+ 
  [Impact]
  
  <placeholder for now>
  
  md/raid1:: dm-0: unrecoverable I/O read error for block 527744
  md/raid1:: dm-1: unrecoverable I/O read error for block 527616
  md/raid1:: dm-0: unrecoverable I/O read error for block 527744
  md/raid1:: dm-1: unrecoverable I/O read error for block 527616
  md/raid1:: dm-1: unrecoverable I/O read error for block 527616
  md/raid1:: dm-0: unrecoverable I/O read error for block 527744
  md/raid1:: dm-1: unrecoverable I/O read error for block 527616
  md/raid1:: dm-0: unrecoverable I/O read error for block 527744
  BUG: kernel NULL pointer dereference, address: 0000000000000040
  #PF: supervisor read access in kernel mode
  #PF: error_code(0x0000) - not-present page
- PGD 0 P4D 0 
+ PGD 0 P4D 0
  SMP NOPTI
  CPU: 3 PID: 19372 Comm: md_1t889zmbfni_ Kdump: loaded Not tainted 
6.8.0-1029-aws #31-Ubuntu
  Hardware name: Amazon EC2 m6a.xlarge/, BIOS 1.0 10/16/2017
  RIP: 0010:process_checks+0x25e/0x5e0 [raid1]
  Code: 8e 19 01 00 00 48 8b 85 78 ff ff ff b9 08 00 00 00 48 8d 7d 90 49 8b 1c 
c4 49 63 c7 4d 8b 74 c4 50 31 c0 f3 48 ab 48 89 5d 88 <4c> 8b 53 40 45 0f b6 4e 
18 49 8b 76 40 49 81 7e 38 a0 04 7c c0 75
  RSP: 0018:ffffb39e8142bcb8 EFLAGS: 00010246
  RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
  RDX: 0000000000000002 RSI: 0000000000000004 RDI: ffffb39e8142bd50
  RBP: ffffb39e8142bd80 R08: ffff9a2e001ea000 R09: 0000000000000000
  R10: 0000000000000000 R11: 0000000000000000 R12: ffff9a2e0cd63280
  R13: ffff9a2e50d1f800 R14: ffff9a2e50d1f000 R15: 0000000000000000
  FS:  0000000000000000(0000) GS:ffff9a3128780000(0000) knlGS:0000000000000000
  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
  CR2: 0000000000000040 CR3: 00000001035b2004 CR4: 00000000003706f0
  Call Trace:
-  <TASK>
-  ? show_regs+0x6d/0x80
-  ? __die+0x24/0x80
-  ? page_fault_oops+0x99/0x1b0
-  ? do_user_addr_fault+0x2e0/0x660
-  ? exc_page_fault+0x83/0x190
-  ? asm_exc_page_fault+0x27/0x30
-  ? process_checks+0x25e/0x5e0 [raid1]
-  ? process_checks+0x125/0x5e0 [raid1]
-  ? srso_alias_return_thunk+0x5/0xfbef5
-  ? ___ratelimit+0xc7/0x130
-  sync_request_write+0x1c8/0x1e0 [raid1]
-  raid1d+0x13a/0x3f0 [raid1]
-  ? srso_alias_return_thunk+0x5/0xfbef5
-  md_thread+0xae/0x190
-  ? __pfx_autoremove_wake_function+0x10/0x10
-  ? __pfx_md_thread+0x10/0x10
-  kthread+0xda/0x100
-  ? __pfx_kthread+0x10/0x10
-  ret_from_fork+0x47/0x70
-  ? __pfx_kthread+0x10/0x10
-  ret_from_fork_asm+0x1b/0x30
-  </TASK>
- 
+  <TASK>
+  ? show_regs+0x6d/0x80
+  ? __die+0x24/0x80
+  ? page_fault_oops+0x99/0x1b0
+  ? do_user_addr_fault+0x2e0/0x660
+  ? exc_page_fault+0x83/0x190
+  ? asm_exc_page_fault+0x27/0x30
+  ? process_checks+0x25e/0x5e0 [raid1]
+  ? process_checks+0x125/0x5e0 [raid1]
+  ? srso_alias_return_thunk+0x5/0xfbef5
+  ? ___ratelimit+0xc7/0x130
+  sync_request_write+0x1c8/0x1e0 [raid1]
+  raid1d+0x13a/0x3f0 [raid1]
+  ? srso_alias_return_thunk+0x5/0xfbef5
+  md_thread+0xae/0x190
+  ? __pfx_autoremove_wake_function+0x10/0x10
+  ? __pfx_md_thread+0x10/0x10
+  kthread+0xda/0x100
+  ? __pfx_kthread+0x10/0x10
+  ret_from_fork+0x47/0x70
+  ? __pfx_kthread+0x10/0x10
+  ret_from_fork_asm+0x1b/0x30
+  </TASK>
  
  [Fix]
  
  This was fixed in 6.15-rc3 with:
  
  commit b7c178d9e57c8fd4238ff77263b877f6f16182ba
  Author: Meir Elisha <meir.eli...@volumez.com>
  Date:  Tue Apr 8 17:38:08 2025 +0300
  Subject: md/raid1: Add check for missing source disk in process_checks()
  Link: 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b7c178d9e57c8fd4238ff77263b877f6f16182ba
  
  This has been applied to jammy and plucky already through upstream -stable.
  Currently noble and oracular are lagging behind and are not up to the -stable
  release with the fix.
  
  [Testcase]
  
  [Where problems can occur]

** Also affects: linux (Ubuntu Oracular)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Questing)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu Questing)
       Status: New => Fix Released

** Changed in: linux (Ubuntu Plucky)
       Status: New => Fix Committed

** Changed in: linux (Ubuntu Oracular)
       Status: New => In Progress

** Changed in: linux (Ubuntu Jammy)
       Status: New => Fix Committed

** Changed in: linux (Ubuntu Noble)
       Status: New => In Progress

** Changed in: linux (Ubuntu Noble)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Oracular)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Noble)
     Assignee: (unassigned) => Matthew Ruffell (mruffell)

** Changed in: linux (Ubuntu Oracular)
     Assignee: (unassigned) => Matthew Ruffell (mruffell)

** Tags added: sts

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2112519

Title:
  raid1: Fix NULL pointer de-reference in process_checks()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2112519/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to