CVE-2023-53299

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s md/raid10 subsystem related to a leak of r10bio->remaining during recovery operations. Specifically, the raid10 sync request() function adds r10bio->remaining for both the original and replacement devices. If a read I/O operation fails during recovery, the recovery request write() function returns without issuing the write I/O, leading to a single call to end sync request() and a leak of remaining, potentially causing I/O hangs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.