Riskcovery

CVE-2026-45888

md/raid1: fix memory leak in raid1_run()

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: fix memory leak in raid1_run()

raid1_run() calls setup_conf() which registers a thread via md_register_thread(). If raid1_set_limits() fails, the previously registered thread is not unregistered, resulting in a memory leak of the md_thread structure and the thread resource itself.

Add md_unregister_thread() to the error path to properly cleanup the thread, which aligns with the error handling logic of other paths in this function.

Compile tested only. Issue found using a prototype static analysis tool and code review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 97894f7d3c2966164516a8a5109674763d3a55e1 to before c94fd6e8a71efd047ff36930e840f3c25679e136Affected
  • 97894f7d3c2966164516a8a5109674763d3a55e1 to before ec10e3dc93994b87adf7c759a4639fe34013989aAffected
  • 97894f7d3c2966164516a8a5109674763d3a55e1 to before b37588b0282a2b3cdda9db1d53712745ce66dea0Affected
  • 97894f7d3c2966164516a8a5109674763d3a55e1 to before 6abc7d5dcf0ee0f85e16e41c87fbd06231f28753Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.