CVE-2026-90279

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5bitmapsectormap aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunksectors multiplied by the number of data...

DEBIAN-CVE-2026-90279

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5bitmapsectormap aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunksectors multiplied by the number of data...

AZL-102684 CVE-2026-90275 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: md/raid1: don't set arrayfrozen in raid1takeover raid1takeover sets conf-arrayfrozen = 1 on the newly-allocated r1conf and nothing ever clears it, so every I/O to the array stalls permanently once waitbarrier sees it stuck at 1...

AZL-102824 CVE-2026-90279 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5bitmapsectormap aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunksectors multiplied by the number of data...

DEBIAN-CVE-2026-90276

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: stop daemon timer rearm on destroy llbitmapdestroy deletes pendingtimer before flushing mdllbitmapiowq. However, daemonwork can still be queued or running after the timer has been deleted, and the daemon path can...

CVE-2026-90401 md: remove REQ_NOWAIT support from raid1/10/456

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

CVE-2026-90401 md: remove REQ_NOWAIT support from raid1/10/456

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

EUVD-2026-82062

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

CVE-2026-90401

CVE-2026-90401 affects the Linux kernel md (multiple device) subsystem, specifically the raid1 , raid10 , and raid456 personalities. The root cause is that REQ_NOWAIT support is fundamentally incomplete for these personalities: when a write to one mirror succeeds while another returns -EAGAIN , m...

CVE-2026-90400 md: recheck spare changes before starting sync

In the Linux kernel, the following vulnerability has been resolved: md: recheck spare changes before starting sync removespares and removeandaddspares modify the array's rdev configuration. These operations are only safe after the array has been suspended. mdstartsync checks whether spare...

EUVD-2026-82061

In the Linux kernel, the following vulnerability has been resolved: md: recheck spare changes before starting sync removespares and removeandaddspares modify the array's rdev configuration. These operations are only safe after the array has been suspended. mdstartsync checks whether spare...

CVE-2026-90400

CVE-2026-90400 is a race condition in the Linux kernel's md/raid10 subsystem. In md_start_sync(), the check for whether spare configuration changes are needed can become stale before reconfig_mutex is acquired, because the rdev state may change in the interim. This allows md_choose_sync_action() ...

CVE-2026-90390 md/bitmap: resume array on backlog_store() error path

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlogstore error path backlogstore suspends the array before checking whether a write-mostly device exists. If no such device exists, the error path only unlocks reconfigmutex and leaves the array...

EUVD-2026-82051

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlogstore error path backlogstore suspends the array before checking whether a write-mostly device exists. If no such device exists, the error path only unlocks reconfigmutex and leaves the array...

CVE-2026-90390 md/bitmap: resume array on backlog_store() error path

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlogstore error path backlogstore suspends the array before checking whether a write-mostly device exists. If no such device exists, the error path only unlocks reconfigmutex and leaves the array...

CVE-2026-90390

CVE-2026-90390 affects the Linux kernel md/bitmap subsystem. The root cause is in backlog_store() , which suspends the array before checking whether a write-mostly device exists. If no such device is found, the error path only unlocks reconfig_mutex but leaves the array suspended, blocking subseq...

CVE-2026-90389 md: scope memalloc_noio to allocation critical sections

In the Linux kernel, the following vulnerability has been resolved: md: scope memallocnoio to allocation critical sections Storing a memallocnoiosave token in mddev-noioflags lets one task save the token and another task restore it. With concurrent suspend sysfs writes, task A can enter...

EUVD-2026-82050

In the Linux kernel, the following vulnerability has been resolved: md: scope memallocnoio to allocation critical sections Storing a memallocnoiosave token in mddev-noioflags lets one task save the token and another task restore it. With concurrent suspend sysfs writes, task A can enter...

CVE-2026-90389 md: scope memalloc_noio to allocation critical sections

In the Linux kernel, the following vulnerability has been resolved: md: scope memallocnoio to allocation critical sections Storing a memallocnoiosave token in mddev-noioflags lets one task save the token and another task restore it. With concurrent suspend sysfs writes, task A can enter...

CVE-2026-90389

CVE-2026-90389 is a bug in the Linux kernel md (multiple device) subsystem . The root cause is that a memalloc_noio_save() token is stored in mddev->noio_flags, allowing one task to save the token and another task to restore it . With concurrent sysfs writes to suspend_lo and suspend_hi, task ...