csirt@kutim:~/threat-intel/cve/CVE-2026-43309

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices) - The top-level RAID device is then removed Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block. Fix: - Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O - Still allow write-intent bitmap flushing when called from dm-raid suspend context This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state. This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.

Rincian

Terbit di NVD
8 Mei 2026
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
EPSS (30 hari)
0,16% peluang dieksploitasi; lebih tinggi dari 4,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
linux linux kernel Versi 4.14.292 hingga sebelum 4.15
linux linux kernel Versi 4.19.257 hingga sebelum 4.20
linux linux kernel Versi 5.4.212 hingga sebelum 5.5
linux linux kernel Versi 5.10.140 hingga sebelum 5.11
linux linux kernel Versi 5.15.64 hingga sebelum 5.16
linux linux kernel Versi 5.19.6 hingga sebelum 6.0
linux linux kernel Versi 6.0.1 hingga sebelum 6.18.16
linux linux kernel Versi 6.19 hingga sebelum 6.19.6
linux linux kernel Versi 6.0
linux linux kernel Versi 6.0 rc3
linux linux kernel Versi 6.0 rc4
linux linux kernel Versi 6.0 rc5
linux linux kernel Versi 6.0 rc6
linux linux kernel Versi 6.0 rc7

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.