CVE-2026-43309

MEDIUM EPSS 2.2%
Published May 8, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices) - The top-level RAID device is then removed Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block. Fix: - Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O - Still allow write-intent bitmap flushing when called from dm-raid suspend context This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state. This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 14

VendorProductVersionRange
linuxlinux_kernel*≥4.14.292  –  <4.15
linuxlinux_kernel*≥4.19.257  –  <4.20
linuxlinux_kernel*≥5.4.212  –  <5.5
linuxlinux_kernel*≥5.10.140  –  <5.11
linuxlinux_kernel*≥5.15.64  –  <5.16
linuxlinux_kernel*≥5.19.6  –  <6.0
linuxlinux_kernel*≥6.0.1  –  <6.18.16
linuxlinux_kernel*≥6.19  –  <6.19.6
linuxlinux_kernel6.0any
linuxlinux_kernel6.0any
linuxlinux_kernel6.0any
linuxlinux_kernel6.0any
linuxlinux_kernel6.0any
linuxlinux_kernel6.0any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/24783dd06de870d646c25207bae186f78195f912
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/338378dfffbdbb8d37a18f0a0c0358812671f91e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cefcb9297fbdb6d94b61787b4f8d84f55b741470
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/24783dd06de870d646c25207bae186f78195f912
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/338378dfffbdbb8d37a18f0a0c0358812671f91e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cefcb9297fbdb6d94b61787b4f8d84f55b741470
    Patch