md raid: fix hang when stopping arrays with metadata through dm-raid
In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices) - The top-level RAID device is then removed Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block. Fix: - Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O - Still allow write-intent bitmap flushing when called from dm-raid suspend context This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state. This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.
CVE-2026-43309
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-43309
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "0dd84b319352bb8ba64752d4e45396d8b13e6018",
"lessThan": "63054027d95200b04f3cf624faa7817e0555d56a",
"versionType": "git"
},
{
"status": "affected",
"version": "0dd84b319352bb8ba64752d4e45396d8b13e6018",
"lessThan": "24783dd06de870d646c25207bae186f78195f912",
"versionType": "git"
},
{
"status": "affected",
"version": "0dd84b319352bb8ba64752d4e45396d8b13e6018",
"lessThan": "338378dfffbdbb8d37a18f0a0c0358812671f91e",
"versionType": "git"
},
{
"status": "affected",
"version": "0dd84b319352bb8ba64752d4e45396d8b13e6018",
"lessThan": "cefcb9297fbdb6d94b61787b4f8d84f55b741470",
"versionType": "git"
},
{
"status": "affected",
"version": "1678ca35b80a94d474fdc31e2497ce5d7ed52512",
"versionType": "git"
},
{
"status": "affected",
"version": "690b5c90fd2d81fd1d2b6110fa36783232f6dce2",
"versionType": "git"
},
{
"status": "affected",
"version": "8e7fb19f1a744fd34e982633ced756fee0498ef7",
"versionType": "git"
},
{
"status": "affected",
"version": "a5a58fab556bfe618b4c9719eb85712d78c6cb10",
"versionType": "git"
},
{
"status": "affected",
"version": "661c01b2181d9413c799127f13143583b69f20fd",
"versionType": "git"
},
{
"status": "affected",
"version": "f42a9819ba84bed2e609a4dff56af37063dcabdc",
"versionType": "git"
},
{
"status": "affected",
"version": "4.14.292",
"lessThan": "4.15",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.19.257",
"lessThan": "4.20",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.4.212",
"lessThan": "5.5",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.140",
"lessThan": "5.11",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.64",
"lessThan": "5.16",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.19.6",
"lessThan": "5.20",
"versionType": "semver"
}
],
"programFiles": [
"drivers/md/md.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.0"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.12.114",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.16",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "6.19.6",
"versionType": "semver",
"lessThanOrEqual": "6.19.*"
},
{
"status": "unaffected",
"version": "7.0",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/md/md.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-43309
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #46286 · Revision 1
- Added to Heist Feed
- Publisher date