CVE-2023-53380

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/09/2025
Last modified:
19/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request<br /> <br /> There are two check of &amp;#39;mreplace&amp;#39; in raid10_sync_request(). In the first<br /> check, &amp;#39;need_replace&amp;#39; will be set and &amp;#39;mreplace&amp;#39; will be used later if<br /> no-Faulty &amp;#39;mreplace&amp;#39; exists, In the second check, &amp;#39;mreplace&amp;#39; will be<br /> set to NULL if it is Faulty, but &amp;#39;need_replace&amp;#39; will not be changed<br /> accordingly. null-ptr-deref occurs if Faulty is set between two check.<br /> <br /> Fix it by merging two checks into one. And replace &amp;#39;need_replace&amp;#39; with<br /> &amp;#39;mreplace&amp;#39; because their values are always the same.

Impact