CVE-2023-54294: md/raid10: fix memleak of md thread

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error path 'conf->thread' is not freed. Fix the problem by setting 'mddev->thread' right after setup_conf().

Affected products

Linux kernel: 4.16 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/2a65555f7e0f4a05b663879908a991e6d9f81e51
https://git.kernel.org/stable/c/36ba0c7b86acd9c2ea80a273204d52c21c955471
https://git.kernel.org/stable/c/3725b35fc0e5e4eea0434ef625f3d92f3059d080
https://git.kernel.org/stable/c/5d763f708b0f918fb87799e33c25113ae6081216
https://git.kernel.org/stable/c/abf4d67060c8f63caff096e5fca1564bfef1e5d4
https://git.kernel.org/stable/c/d6cfcf98b824591cffa4c1e9889fb4fa619359fe
https://git.kernel.org/stable/c/ec473e82e10d39a02eb59b0b95e546119a3bdb79
https://git.kernel.org/stable/c/f0ddb83da3cbbf8a1f9087a642c448ff52ee9abd

Get alerted when CVE-2023-54294 or the next vulnerability affects your stack