CVE-2023-53722

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/10/2025
Last modified:
15/04/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> md: raid1: fix potential OOB in raid1_remove_disk()<br /> <br /> If rddev-&gt;raid_disk is greater than mddev-&gt;raid_disks, there will be<br /> an out-of-bounds in raid1_remove_disk(). We have already found<br /> similar reports as follows:<br /> <br /> 1) commit d17f744e883b ("md-raid10: fix KASAN warning")<br /> 2) commit 1ebc2cec0b7d ("dm raid: fix KASAN warning in raid5_remove_disk")<br /> <br /> Fix this bug by checking whether the "number" variable is<br /> valid.

Impact