CVE-2026-90401

A flaw was found in the Linux kernel's Multiple Device MD RAID personalities, specifically raid1, raid10, and raid456. This vulnerability arises from incomplete support for the REQNOWAIT flag during write operations. When one mirror succeeds and another fails with an -EAGAIN error, the MD driver...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46050)

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix deadlock with check operation and nowait requests When an array check is running it will raise the barrier at which point normal requests will become blocked and increment the nrpending value to signal there is wor...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46161)

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setupgeo with zero farcopies setupgeo extracts nearcopies nc and farcopies fc from the user-provided layout parameter without checking for zero. When fc=0 with the 'improved' far set layout...

Linux RAID10 Component Compromise

The vulnerability of the drivers/md/raid10.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fixed the incorrect setting of maxcorrreaderrors. There is no input validation when using the echo md/maxreaderrors command, and an overflow might occur. Add validation for the input number...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In md/raid10, the issue of null-ptr-deref in raid10syncrequest has been fixed. In initresync, the mempool is initialized, and conf-havereplacemnt is set to 0 at the beginning of the sync process. closesync frees the mempool when...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In md/raid10, when reusing an r10bio for discard, readslot is reset to -1. The putallbios function always drops devsi.bio, but it only drops devsi.replbio when r10bio-readslot 0. If discard reuses an r10bio that was previously us...

ROS-20260924-73-0032

The vulnerability of the raid10run function in the drivers/md/raid10.c module of the Linux kernel affects several device-related functions such as RAID and LVM. This vulnerability is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker ...

SUSE CVE-2026-90401

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

CVE-2026-90401: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: md: Fix for softlockup when the bitmap size is less than the array size. It is reported that for dm-raid10, the command lvextend followed by --syncaction will trigger a softlockup. The error message is as follows: kernel:watchdog...

SUSE CVE-2026-89558

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

Linux Distros Unpatched Vulnerability : CVE-2026-89558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb md/md-bitmap: merge mdbitmapstartsync into bitmapoperations converted...

CVE-2026-89558

A flaw was found in the Linux kernel's md/raid10 RAID10 driver. This vulnerability occurs when a RAID10 array is in a degraded state and a device is being recovered while another mirror is still missing. Due to an inverted boolean value, the system incorrectly clears necessary bitmap bits, causin...

DEBIAN-CVE-2026-89558

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

CVE-2026-89558

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

UBUNTU-CVE-2026-89558

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

CVE-2026-89558

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

CVE-2026-89558 md/raid10: fix still_degraded being inverted in raid10_sync_request()

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

CVE-2026-89558

CVE-2026-89558 is a Linux kernel md/raid10 driver flaw caused by an inverted boolean assignment introduced when still_degraded was converted from int to bool in commit fe6a19d40ceb. When a RAID10 array is degraded and one device is being recovered while another mirror is still missing, the system...