Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_run() calls setup_conf() which registers a thread via md_register_thread(). If raid1_set_limits() fails, the previously registered thread is not unregistered, resulting in a memory leak of the md_thread structure and the thread resource itself. Add md_unregister_thread() to the error path to properly cleanup the thread, which aligns with the error handling logic of other paths in this function. Compile tested only. Issue found using a prototype static analysis tool and code review. A flaw was found in the Linux kernel’s md/raid1 module. This vulnerability occurs when the raid1_run() function calls setup_conf() to register a thread, but a subsequent failure in raid1_set_limits() prevents the proper unregistration of this thread. This oversight leads to a memory leak, consuming system resources over time. A local attacker could potentially exploit this to cause a denial of service by exhausting available memory.Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 13 | Planned | — |