CVE-2023-54294: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error path 'conf->thread' is not freed. Fix the problem by setting 'mddev->thread' right after setup_conf().

Affected products

• Linux Linux: from 4.16, before 4.19.283 (fixed in 4.19.283); from 4.20, before 5.4.243 (fixed in 5.4.243); from 5.5, before 5.10.180 (fixed in 5.10.180); from 5.11, before 5.15.111 (fixed in 5.15.111); from 5.16, before 6.1.28 (fixed in 6.1.28); from 6.2, before 6.2.15 (fixed in 6.2.15); …

Published 2025-12-30. Last modified 2026-06-17.