CVE-2026-90279

CVE-2026-90279 affects the Linux kernel md/raid5 subsystem, specifically the raid5_bitmap_sector_map() function. The root cause is that this function aligns array ranges to full RAID5 stripe widths using round_down()/round_up() mask-based arithmetic, which fails when the stripe width (chunk secto...

CVE-2026-90279: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5bitmapsectormap aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunksectors multiplied by the number of data...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fixed a deadlock in r5lexitlog. The commit b13015af94cf “md/raid5-cache: Clear conf-log after finishing work” introduced a new problem: // The caller holds reconfigmutex r5lexitlog flushwork&log-disablewritebackwo...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: md/raid5: Fixed a deadlock issue where raid5d waits for MDSBCHANGEPENDING to be cleared. Xiao reported that the lvconvert-raid-takeover.sh test can hang with a small possibility. The root cause is the same as in the commit...

SUSE CVE-2026-72420

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102066)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102066 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5crecoveryanalyzemetablock and...

CVE-2026-72420

A flaw was found in the Linux kernel's md/raid5 module. A data-race condition exists between the breakstripebatchlist and raid5makerequest functions. This race can lead to a scenario where a process waits indefinitely, potentially causing a Denial of Service DoS for the system...

CVE-2026-72420

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

AZL-96033 CVE-2026-72420 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72420

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

UBUNTU-CVE-2026-72420

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72420 md/raid5: avoid R5_Overlap races while breaking stripe batches

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72420 md/raid5: avoid R5_Overlap races while breaking stripe batches

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

EUVD-2026-59319

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

CVE-2026-72420

CVE-2026-72420 : In the Linux kernel, a race was reported between md/raid5 break_stripe_batch_list and raid5_make_request, involving sh->dev[i].flags (non-atomic write vs. atomic bit op) that could trigger a data race on R5_Overlap. The public descriptions provide a scenario where CPU1 clears ...

CVE-2026-72420: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write vs. atomic bit op.. and .. one possible scenario is: CPU1 CPU2...

PT-2026-72608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the md/raid5 component between the break stripe batch list and raid5 make request functions. The issue occurs on the sh-devi.flags variable due to a conflict betwee...

Linux Distros Unpatched Vulnerability : CVE-2026-72420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid5: avoid R5Overlap races while breaking stripe batches KCSAN report a race in breakstripebatchlist vs. raid5makerequest on sh-devi.flags plain word write...

The vulnerability of the r5l_exit_log() function in the drivers/md/raid5-cache.c module of the Linux operating system’s device driver suite, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the r5lexitlog function in the drivers/md/raid5-cache.c module of the Linux device driver for multiple devices RAID and LVM involves pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: md/raid5: Fixed possible null-pointer dereferences in raid5storegroupthreadcnt. The variable mddev-private is first assigned to conf, and then checked: c conf = mddev-private; if !conf… If conf is NULL, then mddev-private is also...