In the Linux kernel, the following vulnerability has been resolved:
md raid: fix hang when stopping arrays with metadata through dm-raid
When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions.
This occurs when:
- A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices)
- The top-level RAID device is then removed
Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block.
Fix:
- Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O
- Still allow write-intent bitmap flushing when called from dm-raid suspend context
This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state.
This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-libbpfUpgrade kernel6.18-modules-extraUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade perf6.18Upgrade kernel6.18-headersUpgrade kernel6.18-toolsUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18Upgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-libbpf-develUpgrade python3-perf6.18Upgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.18-debuginfo | May 19, 2026 | May 8, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub