CVE-2026-89575 dm raid1: reserve space for NUL-terminator in build_constructor_string()

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

CVE-2026-89577: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLKSTSNOTSUPP and BLKSTSINVAL should not cause leg failure on dm-raid1. This patch changes the interface to dm-io, so that it reports two error bitmaps - errorbits an...

PT-2026-96417

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build constructor string Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

CVE-2026-89575: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

PT-2026-90293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-io interface where non-retryable error codes BLK STS NOTSUPP and BLK STS INVAL could incorrectly cause leg failure on dm-raid1. This leads to misbehavior when...

PT-2026-90291

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A buffer overflow exists in the dm raid1 component within the build constructor string function. The issue occurs because the system fails to reserve space for the NUL-terminator after the...

SUSE CVE-2026-74373

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for split md cloned bios Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the ioaccounting flag in raid10. The previous logic does not reliably reflect...

SUSE CVE-2026-72437

In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1bio when REQNOWAIT is set and read would block on retry When a read is retried, raid1readrequest may be called with a pre-allocated r1bio. If waitreadbarrier fails for a REQNOWAIT read, the bio is completed and t...

SUSE CVE-2026-74374

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with mdclonedbio Detect the error path using mdclonedbio instead of relying on r1bio in raid1 or r10bio-readslot in raid10, which may be NULL or -1 after splitting and resubmitting a fail...

SUSE CVE-2026-74375

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is suspended befo...

SUSE CVE-2026-72440

In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writespending and barrier reference leaks on write failures raid1makerequest acquires a writespending reference with mdwritestart before calling raid1writerequest. Several failure paths in raid1writerequest complete...

SUSE CVE-2026-74372

In the Linux kernel, the following vulnerability has been resolved: raid1: fix nrpending leak in REQATOMIC bad-block error path In raid1writerequest, each per-mirror loop iteration begins by incrementing rdev-nrpending. If a REQATOMIC write encounters a badblock within the requested range, the co...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: raid1: Fixed a leak of nr Pending in the REQATOMIC bad-block error path. In raid1writerequest, each loop iteration starts by incrementing rdev-nrPending. If a REQATOMIC write encounters a bad block within the requested range, the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1, raid10: fixed the issue where bio accounting was handled for split MD cloned bios. Use mdclonedbio to control bio accounting instead of relying on r1bioexisted in raid1 or the ioaccounting flag in raid10. The previou...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: md/raid1: The free function of the r1bio structure is called when REQNOWAIT is set, and reading from the r1bio structure may block during retries. When a read operation is retried, the raid1readrequest function may be called with...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1: Fixed issues with writepending references and reference leaks during write failures. In raid1makerequest, a reference to writePending is acquired before mdwritestart is called, and then raid1writerequest is called...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1, raid10: fixed deadlock in the read error recovery path. raid1d and raid10d may resubmit a split MD cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is...

The vulnerability in the md/raid1.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the md/raid1.c component of the Linux kernel lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-74374

A flaw was found in the Linux kernel's md/raid1 and md/raid10 modules. An issue in detecting the error path when using mdclonedbio can lead to incorrect memory allocation flags. This misallocation can result in a system deadlock under memory pressure, causing a denial of service...

CVE-2026-72437

A flaw was found in the Linux kernel's md/raid1 component. When a read operation is retried with the REQNOWAIT flag set, and the waitreadbarrier function fails, a pre-allocated r1bio structure may not be properly freed. This resource leak can accumulate over time, potentially leading to a denial ...