CVE-2023-54294 — Missing Release of Resource after Effective Lifetime in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix memleak of md thread
In raid10_run(), if setup_conf() succeed and raid10_run() failed before
setting 'mddev->thread', then in the error path 'conf->thread' is not
freed.
Fix the problem by setting 'mddev->thread' right after setup_conf().
Affected Packages4 packages
▶CVEListV5linux/linux43a521238aca0e24d50add1db125a61bda2a3527 — abf4d67060c8f63caff096e5fca1564bfef1e5d4+8
🔴Vulnerability Details
3OSV▶
CVE-2023-54294: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and r↗2025-12-30
GHSA▶
GHSA-cpq6-27xg-r565: In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix memleak of md thread
In raid10_run(), if setup_conf() succeed and↗2025-12-30