SUSE CVE-2026-72439

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writespending leak on write request failures raid10makerequest acquires a writespending reference with mdwritestart before dispatching write requests. Several failure paths in raid10writerequest complete the bio an...

SUSE CVE-2026-74374

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with mdclonedbio Detect the error path using mdclonedbio instead of relying on r1bio in raid1 or r10bio-readslot in raid10, which may be NULL or -1 after splitting and resubmitting a fail...

SUSE CVE-2026-74376

In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset readslot when reusing r10bio for discard putallbios always drops devsi.bio, but it only drops devsi.replbio when r10bio-readslot 0. If discard reuses an r10bio that was previously used for a read, readslot can...

SUSE CVE-2026-72440

In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writespending and barrier reference leaks on write failures raid1makerequest acquires a writespending reference with mdwritestart before calling raid1writerequest. Several failure paths in raid1writerequest complete...

Malicious code in @cortana-md/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d849c8409247f2e6aa75683bf87afacaf8db81daded8235a622e952c94ccbb7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14553 Malicious code in @cortana-md/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d849c8409247f2e6aa75683bf87afacaf8db81daded8235a622e952c94ccbb7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview @cortana-md/engine is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ROS-20260826-73-0018

The vulnerability of the statusresync function in the drivers/md/md.c file of the multiple-device driver RAID and LVM module of the Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098857)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098857 advisory. In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the md subsystem, there was a issue where the “activeio” value was not properly released after the submitflushes function was called. This caused the “activeio” value to remain unreleased, leading to a situation where...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In md/raid10, when reusing an r10bio for discard, readslot is reset to -1. The putallbios function always drops devsi.bio, but it only drops devsi.replbio when r10bio-readslot 0. If discard reuses an r10bio that was previously us...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1: Fixed issues with writepending references and reference leaks during write failures. In raid1makerequest, a reference to writePending is acquired before mdwritestart is called, and then raid1writerequest is called...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1, raid10: fixed deadlock in the read error recovery path. raid1d and raid10d may resubmit a split MD cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1, raid10: fixed the issue where bio accounting was handled for split MD cloned bios. Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the ioaccounting flag in raid10. The previou...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: md/raid1: The free function of the r1bio structure is called when REQNOWAIT is set, and reading from the r1bio structure may block during retries. When a read operation is retried, the raid1readrequest function may be called with...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - In md/raid10, issues with writepending references and barrier reference leaks during discard failures were addressed. - In raid10makerequest, a reference to writepending is acquired before mdwritestart is called, and then...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - md/raid10: Fixed the issue of a “writesPending” reference being retained after write request failures. - In raid10makerequest, the “writesPending” reference is acquired with mdwritestart before dispatching write requests...

The vulnerability in the md/raid1.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the md/raid1.c component of the Linux kernel lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-80322

Vulnerability Details File: src/lib/addons/feature-event-formatter-md.ts Line: 355 in v8.0.1; format method Root Cause FeatureEventFormatterMd.format does: ts Mustache.escape = text = text; const text = Mustache.renderaction, context; mustache pinned ^4.2.0, confirmed installed 4.2.0 keeps escape...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102066)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102066 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5crecoveryanalyzemetablock and...