PT-2025-54140

CVE-2023-54294

·

Published

2023-04-13

·

Updated

2026-09-24

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists in the md/raid10 component of the Linux kernel. Specifically, within the raid10 run() function, if setup conf() succeeds but raid10 run() fails before setting mddev->thread, the conf->thread memory is not freed, leading to a memory leak. The issue is resolved by setting mddev->thread immediately after setup conf().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
OESA-2026-1306
RHSA-2023:6583
RHSA-2023:7077
RHSA-2023:7539
SUSE-SU-2026:0263-1
SUSE-SU-2026:0316-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1
Found an issue in the description? Have something to add? Feel free to write us 👾