The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
md: make rdev_addable usable for rcu mode
Our testcase trigger panic:
BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... Oops: Oops: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 85 Comm: kworker/2:1 Not tainted 6.16.0+ #94 PREEMPT(none) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 Workqueue: md_misc md_start_sync RIP: 0010:rdev_addable+0x4d/0xf0 ... Call Trace: <TASK> md_start_sync+0x329/0x480 process_one_work+0x226/0x6d0 worker_thread+0x19e/0x340 kthread+0x10f/0x250 ret_from_fork+0x14d/0x180 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: raid10 CR2: 00000000000000e0 ---[ end trace 0000000000000000 ]--- RIP: 0010:rdev_addable+0x4d/0xf0
md_spares_need_change in md_start_sync will call rdev_addable which protected by rcu_read_lock/rcu_read_unlock. This rcu context will help protect rdev won't be released, but rdev->mddev will be set to NULL before we call synchronize_rcu in md_kick_rdev_from_array. Fix this by using READ_ONCE and check does rdev->mddev still alive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Sep 30, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 22, 2026 | Aug 22, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-debug-devel | Dec 5, 2025 | Sep 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Aug 22, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub