CVE-2023-54123 - Vulnerability Details

- md/raid10: fix memleak for 'conf->bio_split'

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix memleak for 'conf->bio_split'

In the error path of raid10_run(), 'conf' need be freed, however,
'conf->bio_split' is missed and memory will be leaked.

Since there are 3 places to free 'conf', factor out a helper to fix the
problem.

Published: 2025-12-24

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< 133008af833b4f2e021d2c294c29c70364a3f0ba
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< b6460f68c1cc95a80d089af402be501619f228e4
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< 6361b0592b46c465ac926c1f3105d66c30d9658b
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< 7f673fa34c0e3f95ee951a1bbf61791164871d2e
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< b21019a220d9cac08819bb6c63000de9ee61eb9e
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< 5cba3e26c073b535e4e3b825ea481fb29c53943b
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< e2fec8d95353a48634b085011626ba3ec8ab8b1c
`fc9977dd069e4f82fcacb262652117c488647319`	affected	< c9ac2acde53f5385de185bccf6aaa91cf9ac1541

Linux

affected

Version	Status	Constraints
`4.12`	affected	—
`0`	unaffected	< 4.12
`4.19.283`	unaffected	≤ 4.19.*
`5.4.243`	unaffected	≤ 5.4.*
`5.10.180`	unaffected	≤ 5.10.*
`5.15.111`	unaffected	≤ 5.15.*
`6.1.28`	unaffected	≤ 6.1.*
`6.2.15`	unaffected	≤ 6.2.*
`6.3.2`	unaffected	≤ 6.3.*
`6.4`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/133008af833b4f2e021d2c294c29c70364a3f0ba
https://git.kernel.org/stable/c/5cba3e26c073b535e4e3b825ea481fb29c53943b
https://git.kernel.org/stable/c/6361b0592b46c465ac926c1f3105d66c30d9658b
https://git.kernel.org/stable/c/7f673fa34c0e3f95ee951a1bbf61791164871d2e
https://git.kernel.org/stable/c/b21019a220d9cac08819bb6c63000de9ee61eb9e
https://git.kernel.org/stable/c/b6460f68c1cc95a80d089af402be501619f228e4
https://git.kernel.org/stable/c/c9ac2acde53f5385de185bccf6aaa91cf9ac1541
https://git.kernel.org/stable/c/e2fec8d95353a48634b085011626ba3ec8ab8b1c
https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2023-54123-4e1b@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54123
https://www.cve.org/CVERecord?id=CVE-2023-54123

History

Thu, 25 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2023-54123-4e1b@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54123 https://www.cve.org/CVERecord?id=CVE-2023-54123
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Wed, 24 Dec 2025 13:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf->bio_split' In the error path of raid10_run(), 'conf' need be freed, however, 'conf->bio_split' is missed and memory will be leaked. Since there are 3 places to free 'conf', factor out a helper to fix the problem.
Title		md/raid10: fix memleak for 'conf->bio_split'
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/133008af833b4f2e021d2c294c29c70364a3f0ba https://git.kernel.org/stable/c/5cba3e26c073b535e4e3b825ea481fb29c53943b https://git.kernel.org/stable/c/6361b0592b46c465ac926c1f3105d66c30d9658b https://git.kernel.org/stable/c/7f673fa34c0e3f95ee951a1bbf61791164871d2e https://git.kernel.org/stable/c/b21019a220d9cac08819bb6c63000de9ee61eb9e https://git.kernel.org/stable/c/b6460f68c1cc95a80d089af402be501619f228e4 https://git.kernel.org/stable/c/c9ac2acde53f5385de185bccf6aaa91cf9ac1541 https://git.kernel.org/stable/c/e2fec8d95353a48634b085011626ba3ec8ab8b1c

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-24T13:06:42.588Z

Updated: 2026-05-11T19:55:55.488Z

Reserved: 2025-12-24T13:02:52.521Z

Link: CVE-2023-54123

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-24T13:16:14.263

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54123

Redhat

Severity : Low

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2023-54123 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object