CVE-2023-53299
published 2025-09-16CVE-2023-53299: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix leak of 'r10bio->remaining' for recovery
raid10_sync_request() will add 'r10bio->remaining' for both rdev and
replacement rdev. However, if the read io fails, recovery_request_write()
returns without issuing the write io, in this case, end_sync_request()
is only called once and 'remaining' is leaked, cause an io hang.
Fix the problem by decreasing 'remaining' according to if 'bio' and
'repl_bio' is valid.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < cb827ed2bb34480dc102146d3a1f89fdbcafc028 | cb827ed2bb34480dc102146d3a1f89fdbcafc028 |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 1d2c6c6e37fe5de11fd01a82badf03390e12df7a | 1d2c6c6e37fe5de11fd01a82badf03390e12df7a |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 8c5d5d7ffd1e76734811b8ea5417cf0432b9952c | 8c5d5d7ffd1e76734811b8ea5417cf0432b9952c |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 1697fb124c6d6c5237e9cbd78890310154738084 | 1697fb124c6d6c5237e9cbd78890310154738084 |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 8d09065802c53cc938d162b62f6c4150b392c90e | 8d09065802c53cc938d162b62f6c4150b392c90e |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 11141630f03efffdfe260b3582b2d93d38171b97 | 11141630f03efffdfe260b3582b2d93d38171b97 |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 3481dec5ecbbbbe44ab23e22c2b14bd65c644ec6 | 3481dec5ecbbbbe44ab23e22c2b14bd65c644ec6 |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 4f82e7e07cdaf2947d71968e3d6b73370a217093 | 4f82e7e07cdaf2947d71968e3d6b73370a217093 |
| linux | linux | >= 24afd80d99f80a79d8824d2805114b8b067e9823 < 26208a7cffd0c7cbf14237ccd20c7270b3ffeb7e | 26208a7cffd0c7cbf14237ccd20c7270b3ffeb7e |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 3.3 < 4.14.315 | 4.14.315 |
| linux | linux_kernel | >= 4.15 < 4.19.283 | 4.19.283 |
| linux | linux_kernel | >= 4.20 < 5.4.243 | 5.4.243 |
| linux | linux_kernel | >= 5.11 < 5.15.111 | 5.15.111 |
| linux | linux_kernel | >= 5.16 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 5.5 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3 < 6.3.2 | 6.3.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-53299: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will
osv·2025-09-16·CVSS 5.5
CVE-2023-53299 [MEDIUM] CVE-2023-53299: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev. However, if the read io fails, recovery_request_write() returns without issuing the write io, in this case, end_sync_request() is only called once and 'remaining' is leaked, cause an io hang. Fix the problem by decreasing 'remaining' according to if 'bio' and 'repl_bio' is valid.
GHSA
GHSA-hhmc-3cvv-pmfw: In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix leak of 'r10bio->remaining' for recovery
raid10_sync_request() wi
ghsa_unreviewed·2025-09-16
CVE-2023-53299 [MEDIUM] CWE-401 GHSA-hhmc-3cvv-pmfw: In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix leak of 'r10bio->remaining' for recovery
raid10_sync_request() wi
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix leak of 'r10bio->remaining' for recovery
raid10_sync_request() will add 'r10bio->remaining' for both rdev and
replacement rdev. However, if the read io fails, recovery_request_write()
returns without issuing the write io, in this case, end_sync_request()
is only called once and 'remaining' is leaked, cause an io hang.
Fix the problem by decreasing 'remaining' according to if 'bio' and
'repl_bio' is valid.
Red Hat
kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery
vendor_redhat·2025-09-16·CVSS 5.5
CVE-2023-53299 [MEDIUM] CWE-772 kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery
kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix leak of 'r10bio->remaining' for recovery
raid10_sync_request() will add 'r10bio->remaining' for both rdev and
replacement rdev. However, if the read io fails, recovery_request_write()
returns without issuing the write io, in this case, end_sync_request()
is only called once and 'remaining' is leaked, cause an io hang.
Fix the problem by decreasing 'remaining' according to if 'bio' and
'repl_bio' is valid.
Statement: RAID10 recovery could leak the r10bio->remaining counter on read failure, preventing completion and causing an I/O hang. The fix decrements the counter only for actually issued bios, avoiding the stall.
This is a reliability bug, n
Debian
CVE-2023-53299: linux - In the Linux kernel, the following vulnerability has been resolved: md/raid10: ...
vendor_debian·2023·CVSS 5.5
CVE-2023-53299 [MEDIUM] CVE-2023-53299: linux - In the Linux kernel, the following vulnerability has been resolved: md/raid10: ...
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev. However, if the read io fails, recovery_request_write() returns without issuing the write io, in this case, end_sync_request() is only called once and 'remaining' is leaked, cause an io hang. Fix the problem by decreasing 'remaining' according to if 'bio' and 'repl_bio' is valid.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/11141630f03efffdfe260b3582b2d93d38171b97https://git.kernel.org/stable/c/1697fb124c6d6c5237e9cbd78890310154738084https://git.kernel.org/stable/c/1d2c6c6e37fe5de11fd01a82badf03390e12df7ahttps://git.kernel.org/stable/c/26208a7cffd0c7cbf14237ccd20c7270b3ffeb7ehttps://git.kernel.org/stable/c/3481dec5ecbbbbe44ab23e22c2b14bd65c644ec6https://git.kernel.org/stable/c/4f82e7e07cdaf2947d71968e3d6b73370a217093https://git.kernel.org/stable/c/8c5d5d7ffd1e76734811b8ea5417cf0432b9952chttps://git.kernel.org/stable/c/8d09065802c53cc938d162b62f6c4150b392c90ehttps://git.kernel.org/stable/c/cb827ed2bb34480dc102146d3a1f89fdbcafc028
2025-09-16
Published