CVE-2026-45888
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/05/2026
Last modified:
27/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
md/raid1: fix memory leak in raid1_run()<br />
<br />
raid1_run() calls setup_conf() which registers a thread via<br />
md_register_thread(). If raid1_set_limits() fails, the previously<br />
registered thread is not unregistered, resulting in a memory leak<br />
of the md_thread structure and the thread resource itself.<br />
<br />
Add md_unregister_thread() to the error path to properly cleanup<br />
the thread, which aligns with the error handling logic of other paths<br />
in this function.<br />
<br />
Compile tested only. Issue found using a prototype static analysis tool<br />
and code review.



