CVE-2023-54294

CVE-2023-54294 affects the Linux kernel raid10 subsystem. The root cause was a memleak of the md thread in raid10_run(): if setup_conf() succeeds but raid10_run() fails before mddev->thread is set, the error path could leak conf->thread. The fix sets mddev->thread immediately after setup...

AZL-65693 CVE-2025-38444 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10makerequest If raid10readrequest or raid10writerequest registers a new request and the REQNOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object...