The vulnerability of the raid0_run() function (drivers/md/raid0.c) and raid10_run() function (drivers/md/raid10.c) in the Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the raid0run function drivers/md/raid0.c and raid10run function drivers/md/raid10.c in the Linux kernel is related to buffer overflow based stack-based attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2023-54294: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10run, if setupconf succeed and raid10run failed before setting 'mddev-thread', then in the error path 'conf-thread' is not freed. Fix the problem by setting 'mddev-thread' right after...

CVE-2023-54123: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf-biosplit' In the error path of raid10run, 'conf' need be freed, however, 'conf-biosplit' is missed and memory will be leaked. Since there are 3 places to free 'conf', factor out a helper to fix th...

CVE-2024-50109: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null ptr dereference in raid10size In raid10run if raid10setqueuelimits succeed, the return value is set to zero, and if following procedures failed raid10run will return zero while mddev-private is still NULL,...