CVE-2023-54123
Memory Leak in Linux Kernel md/raid10 Component Fixed
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory leak in the Linux kernel's RAID10 implementation. Specifically, in the error handling path of the raid10_run() function, a structure called 'conf' is freed, but a member 'conf->bio_split' is not freed, causing memory to be leaked. The fix involved creating a helper function to properly free all parts of 'conf' to prevent the leak.
How can this vulnerability impact me? :
The memory leak can cause the system to consume more memory over time, potentially leading to degraded performance or system instability, especially on systems using RAID10 configurations. This could result in crashes or reduced availability if the leak is significant.