CVE-2023-54294

kernel: md/raid10: fix memleak of md thread

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · July 22, 2026

Description

A memory leak was found in the MD RAID10 driver. When raid10_run() fails after setup_conf() succeeds but before mddev->thread is set, the conf->thread is not freed, leaking kernel thread resources.

Statement

This leak occurs only when RAID10 array assembly fails at a specific point. The impact is limited to systems attempting to assemble RAID10 arrays that fail for other reasons during the run phase.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime