NetSight
IP …
medium5.5

CVE-2023-53380

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request There are two check of 'mr…

Impact

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request There are two check of 'mreplace' in raid10_sync_request(). In the first check, 'need_replace' will be set and 'mreplace' will be used later if no-Faulty 'mreplace' exists, In the second check, 'mreplace' will be set to NULL if it is Faulty, but 'need_replace' will not be changed accordingly. null-ptr-deref occurs if Faulty is set between two check. Fix it by merging two checks into one. And replace 'need_replace' with 'mreplace' because their values are always the same.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.20 before 5.4.251
from 5.5 before 5.10.188
from 5.11 before 5.15.121
from 5.16 before 6.1.39
from 6.2 before 6.3.13
from 6.4 before 6.4.4

Weakness classification

CWE-476

References