In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null ptr dereference in raid10size() In raid10run() if raid10setqueuelimits() succeed, the return value is set to zero, and if following procedures failed raid10run() will return zero while mddev->private is still NULL, causing null ptr dereference in raid10size(). Fix the problem by only overwrite the return value if raid10setqueuelimits() failed.