CVE-2023-53722: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1_remove_disk() If rddev->raid_disk is greater than mddev->raid_disks, there will be an out-of-bounds in raid1_remove_disk(). We have already found similar reports as follows: 1) commit d17f744e883b ("md-raid10: fix KASAN warning") 2) commit 1ebc2cec0b7d ("dm raid: fix KASAN warning in raid5_remove_disk") Fix this bug by checking whether the "number" variable is valid.

Affected products

• Linux Linux: from 3.3, before 4.14.326 (fixed in 4.14.326); from 4.15, before 4.19.295 (fixed in 4.19.295); from 4.20, before 5.4.257 (fixed in 5.4.257); from 5.5, before 5.10.197 (fixed in 5.10.197); from 5.11, before 5.15.133 (fixed in 5.15.133); from 5.16, before 6.1.55 (fixed in 6.1.55); …

Published 2025-10-22. Last modified 2026-06-17.