CVE-2023-54294

md/raid10: fix memleak of md thread

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix memleak of md thread

In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error path 'conf->thread' is not freed.

Fix the problem by setting 'mddev->thread' right after setup_conf().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	43a521238aca0e24d50add1db125a61bda2a3527 to before abf4d67060c8f63caff096e5fca1564bfef1e5d4Affected 43a521238aca0e24d50add1db125a61bda2a3527 to before 3725b35fc0e5e4eea0434ef625f3d92f3059d080Affected 43a521238aca0e24d50add1db125a61bda2a3527 to before 2a65555f7e0f4a05b663879908a991e6d9f81e51Affected 43a521238aca0e24d50add1db125a61bda2a3527 to before d6cfcf98b824591cffa4c1e9889fb4fa619359feAffected 43a521238aca0e24d50add1db125a61bda2a3527 to before 36ba0c7b86acd9c2ea80a273204d52c21c955471Affected 43a521238aca0e24d50add1db125a61bda2a3527 to before 5d763f708b0f918fb87799e33c25113ae6081216Affected 43a521238aca0e24d50add1db125a61bda2a3527 to before ec473e82e10d39a02eb59b0b95e546119a3bdb79Affected 43a521238aca0e24d50add1db125a61bda2a3527 to before f0ddb83da3cbbf8a1f9087a642c448ff52ee9abdAffected
LinuxLinux	4.16Affected before 4.16Not affected 4.19.283 through 4.19.Not affected 5.4.243 through 5.4.Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

43a521238aca0e24d50add1db125a61bda2a3527 to before abf4d67060c8f63caff096e5fca1564bfef1e5d4Affected
43a521238aca0e24d50add1db125a61bda2a3527 to before 3725b35fc0e5e4eea0434ef625f3d92f3059d080Affected
43a521238aca0e24d50add1db125a61bda2a3527 to before 2a65555f7e0f4a05b663879908a991e6d9f81e51Affected
43a521238aca0e24d50add1db125a61bda2a3527 to before d6cfcf98b824591cffa4c1e9889fb4fa619359feAffected
43a521238aca0e24d50add1db125a61bda2a3527 to before 36ba0c7b86acd9c2ea80a273204d52c21c955471Affected
43a521238aca0e24d50add1db125a61bda2a3527 to before 5d763f708b0f918fb87799e33c25113ae6081216Affected
43a521238aca0e24d50add1db125a61bda2a3527 to before ec473e82e10d39a02eb59b0b95e546119a3bdb79Affected
43a521238aca0e24d50add1db125a61bda2a3527 to before f0ddb83da3cbbf8a1f9087a642c448ff52ee9abdAffected

LinuxLinux

4.16Affected
before 4.16Not affected
4.19.283 through 4.19.*Not affected
5.4.243 through 5.4.*Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.