CVE-2023-54123

md/raid10: fix memleak for 'conf->bio_split'

N/A
Published: December 24, 2025 at 01:06 PM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf->bio_split' In the error path of raid10_run(), 'conf' need be freed, however, 'conf->bio_split' is missed and memory will be leaked. Since there are 3 places to free 'conf', factor out a helper to fix the problem.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.12 ≤ v < 4.19.2834.12 ≤ v < 5.10.1804.12 ≤ v < 5.15.1114.12 ≤ v < 5.4.2434.12 ≤ v < 6.1.284.12 ≤ v < 6.2.154.12 ≤ v < 6.3.24.12 ≤ v < 6.44.12fc9977dd069e4f82fcacb262652117c488647319
Vendor states this is fixed in 133008af833b4f2e021d2c294c29c70364a3f0ba (fixed)
Vendor states this is fixed in 5cba3e26c073b535e4e3b825ea481fb29c53943b (fixed)
Vendor states this is fixed in 6361b0592b46c465ac926c1f3105d66c30d9658b (fixed)
Vendor states this is fixed in 7f673fa34c0e3f95ee951a1bbf61791164871d2e (fixed)
Vendor states this is fixed in b21019a220d9cac08819bb6c63000de9ee61eb9e (fixed)
Vendor states this is fixed in b6460f68c1cc95a80d089af402be501619f228e4 (fixed)
Vendor states this is fixed in c9ac2acde53f5385de185bccf6aaa91cf9ac1541 (fixed)
Vendor states this is fixed in e2fec8d95353a48634b085011626ba3ec8ab8b1c (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 4.19.283 (unaffected)
Vendor states this is fixed in 5.10.180 (unaffected)
Vendor states this is fixed in 5.15.111 (unaffected)
Vendor states this is fixed in 5.4.243 (unaffected)
Vendor states this is fixed in 6.1.28 (unaffected)
Vendor states this is fixed in 6.2.15 (unaffected)
Vendor states this is fixed in 6.3.2 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card