CVE-2023-53832

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's md/raid10 component, specifically within the raid10 sync request function. The issue involves a null pointer dereference that can occur when recovery is skipped and init resync() is called, but close sync() is not. This can happen after an array resynchronization completes, leading to a scenario where r10bio->dev[i].repl bio is accessed without being allocated, resulting in a null pointer dereference. The root cause is related to the handling of device replacement during recovery processes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.