Vulnerability in Linux

CVE-2023-54294

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error path 'conf->thread' is not freed. Fix the problem by setting 'mddev->thread' right after setup_conf().

EPSS: 0.002 (7.5th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 43a521238aca0e24d50add1db125a61bda2a3527, 4.16, 0

References