ROS-20260924-73-0032

The vulnerability of the raid10run function in the drivers/md/raid10.c module of the Linux kernel affects several device-related functions such as RAID and LVM. This vulnerability is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker ...

Linux kernel raid0_run raid10_run Use-After-Free

The vulnerability of the raid0run function drivers/md/raid0.c and raid10run function drivers/md/raid10.c in the Linux kernel is related to buffer overflow based stack-based attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2023-54294: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10run, if setupconf succeed and raid10run failed before setting 'mddev-thread', then in the error path 'conf-thread' is not freed. Fix the problem by setting 'mddev-thread' right after...

CVE-2023-54123: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf-biosplit' In the error path of raid10run, 'conf' need be freed, however, 'conf-biosplit' is missed and memory will be leaked. Since there are 3 places to free 'conf', factor out a helper to fix th...

CVE-2024-50109: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null ptr dereference in raid10size In raid10run if raid10setqueuelimits succeed, the return value is set to zero, and if following procedures failed raid10run will return zero while mddev-private is still NULL,...