In the Linux kernel, the following vulnerability has been resolved:
md/raid10: fix null ptr dereference in raid10_size()
In raid10run() if raid10setqueuelimits() succeed, the return value is set to zero, and if following procedures failed raid10run() will return zero while mddev->private is still NULL, causing null ptr dereference in raid10size().
Fix the problem by only overwrite the return value if raid10setqueue_limits() failed.