← CVE index
Vulnerability record/PUBLISHED/Published May 27, 2026 12:16:59 UTC

CVE-2026-45888

In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_run() calls setup_conf() which registers a thread via md_register_thread(). If raid1_set_limits() fails, the previously registered thread is not unregistered, resulting in a memory leak of the md_thread structure and the thread resource itself. Add md_unregister_thread() to the error path to properly cleanup the thread, which aligns with the error handling logic of other paths in this function. Compile tested only. Issue found using a prototype static analysis tool and code review.

Base scoreN/A/ 10
SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityNone
No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityLinux
Last updatedNov 6, 2026 15:53:10 UTC
PublishedMay 27, 2026 12:16:59 UTC
ReservedMay 13, 2026 15:03:33 UTC