CVE-2026-89577

A flaw was found in the Linux kernel's device mapper I/O dm-io and RAID1 dm-raid1 components. Incorrect error handling for non-retryable errors such as BLKSTSNOTSUPP and BLKSTSINVAL could lead to misbehavior when a user utilizes unaligned bio vectors on dm-raid1. This misbehavior could potentiall...

CVE-2026-90385

A flaw was found in the Linux kernel. When a new storage device is added to an existing RAID1 array with a specific serialization policy enabled, a critical internal object is not properly initialized. This oversight can lead to a system crash, resulting in a Denial of Service DoS for the affecte...

CVE-2026-90401

A flaw was found in the Linux kernel's Multiple Device MD RAID personalities, specifically raid1, raid10, and raid456. This vulnerability arises from incomplete support for the REQNOWAIT flag during write operations. When one mirror succeeds and another fails with an -EAGAIN error, the MD driver...

Linux kernel RAID1 DoS

The vulnerability in the raid1readrequest function within the drivers/md/raid1.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CLSA-2026-1783414723 kernel: Fix of 10 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - ALSA: usb-audio: Add sanity check for OOB writes at silencing CVE-2026-43279 - ip6tunnel: clear skb2-cb in ip4ip6err CVE-2026-43037 - ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach CVE-2026-43038 - scsi:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md/raid1: The issue of stack memory usage after a return in the raid1reshape function has been fixed. In the raid1reshape function, the newpool is allocated on the stack and assigned to conf-r1biopool. This causes...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in buildconstructorstring Reserve space for the termination NUL after the maximum 20 decimal digits of a long long value to avoid buffer overflow in sprintf...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md/raid1: stop mdxraid1 thread when raid1 array run failed fail run raid1 array when we assemble array with the inactive disk only, but the mdxraid1 thread were not stop, Even if the associated resources have been released. it wi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: md: raid1: fixed a potential out-of-bounds error in raid1removedisk. If rddev-raiddisk is greater than mddev-raiddisks, an out-of-bounds error will occur in raid1removedisk. We have already encountered similar reports, as...

CVE-2026-90275

A flaw was found in the Linux kernel's md/raid1 component. The raid1takeover function incorrectly sets a flag arrayfrozen that is not subsequently cleared. This issue can lead to a permanent stall of all input/output I/O operations to the RAID array, effectively causing a Denial of Service DoS fo...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid1: The free function of the r1bio structure is called when REQNOWAIT is set, and reading from the structure may block during retries. When a read operation is retried, the raid1readrequest function may be called with a...

ROS-20260923-73-0081

The vulnerability of the raid1removedisk function in the drivers/md/raid1.c module of the Linux device driver suite, which handles multiple devices such as RAID and LVM, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a system failure...

SUSE CVE-2026-90275

In the Linux kernel, the following vulnerability has been resolved: md/raid1: don't set arrayfrozen in raid1takeover raid1takeover sets conf-arrayfrozen = 1 on the newly-allocated r1conf and nothing ever clears it, so every I/O to the array stalls permanently once waitbarrier sees it stuck at 1...

SUSE CVE-2026-90385

In the Linux kernel, the following vulnerability has been resolved: md/raid1: create serial pool adding rdev to array with serializepolicy=1 The following bug has been observed with kernel 7.1.3 after adding a new rdev to an existing RAID1 array with serializepolicy enabled: Oops: 0002 1 CPU: 0...

SUSE CVE-2026-90401

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

Linux Distros Unpatched Vulnerability : CVE-2026-90278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md: wait for behind writes before destroying bitmap mdstop destroyed the bitmap before calling mddevdetach. That made mddevdetach skip bitmapops-waitbehindwrite...

Linux Distros Unpatched Vulnerability : CVE-2026-90401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoi...

Linux Distros Unpatched Vulnerability : CVE-2026-90385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1: create serial pool adding rdev to array with serializepolicy=1 The following bug has been observed with kernel 7.1.3 after adding a new rdev to an...

Linux Distros Unpatched Vulnerability : CVE-2026-90275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1: don't set arrayfrozen in raid1takeover raid1takeover sets conf-arrayfrozen = 1 on the newly-allocated r1conf and nothing ever clears it, so every I/O ...

DEBIAN-CVE-2026-90401

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...