CVE-2023-53380

md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request

There are two check of 'mreplace' in raid10_sync_request(). In the first check, 'need_replace' will be set and 'mreplace' will be used later if no-Faulty 'mreplace' exists, In the second check, 'mreplace' will be set to NULL if it is Faulty, but 'need_replace' will not be changed accordingly. null-ptr-deref occurs if Faulty is set between two check.

Fix it by merging two checks into one. And replace 'need_replace' with 'mreplace' because their values are always the same.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	ee37d7314a32ab6809eacc3389bad0406c69a81f to before 45fa023b3334a7ae6f6c4eb977295804222dfa28Affected ee37d7314a32ab6809eacc3389bad0406c69a81f to before 2990e2ece18dd4cca71b3109c80517ad94adb065Affected ee37d7314a32ab6809eacc3389bad0406c69a81f to before f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4fAffected ee37d7314a32ab6809eacc3389bad0406c69a81f to before 222cc459d59857ee28a5366dc225ab42b22f9272Affected ee37d7314a32ab6809eacc3389bad0406c69a81f to before b5015b97adda6a24dd3e713c63e521ecbeff25c6Affected ee37d7314a32ab6809eacc3389bad0406c69a81f to before 144c7fd008e0072b0b565f1157eec618de54ca8aAffected ee37d7314a32ab6809eacc3389bad0406c69a81f to before 34817a2441747b48e444cb0e05d84e14bc9443daAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

ee37d7314a32ab6809eacc3389bad0406c69a81f to before 45fa023b3334a7ae6f6c4eb977295804222dfa28Affected
ee37d7314a32ab6809eacc3389bad0406c69a81f to before 2990e2ece18dd4cca71b3109c80517ad94adb065Affected
ee37d7314a32ab6809eacc3389bad0406c69a81f to before f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4fAffected
ee37d7314a32ab6809eacc3389bad0406c69a81f to before 222cc459d59857ee28a5366dc225ab42b22f9272Affected
ee37d7314a32ab6809eacc3389bad0406c69a81f to before b5015b97adda6a24dd3e713c63e521ecbeff25c6Affected
ee37d7314a32ab6809eacc3389bad0406c69a81f to before 144c7fd008e0072b0b565f1157eec618de54ca8aAffected
ee37d7314a32ab6809eacc3389bad0406c69a81f to before 34817a2441747b48e444cb0e05d84e14bc9443daAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.