In the Linux kernel, the following vulnerability has been resolved:
md: init bioset in mddev_init
IO operations may be needed before md_run(), such as updating metadata after writing sysfs. Without bioset, this triggers a NULL pointer dereference as below:
BUG: kernel NULL pointer dereference, address: 0000000000000020 Call Trace: md_update_sb+0x658/0xe00 new_level_store+0xc5/0x120 md_attr_store+0xc9/0x1e0 sysfs_kf_write+0x6f/0xa0 kernfs_fop_write_iter+0x141/0x2a0 vfs_write+0x1fc/0x5a0 ksys_write+0x79/0x180 __x64_sys_write+0x1d/0x30 x64_sys_call+0x2818/0x2880 do_syscall_64+0xa9/0x580 entry_SYSCALL_64_after_hwframe+0x4b/0x53
Reproducer ``` mdadm -CR /dev/md0 -l1 -n2 /dev/sd[cd] echo inactive > /sys/block/md0/md/array_state echo 10 > /sys/block/md0/md/new_level ```
mddev_init() can only be called once per mddev, no need to test if bioset has been initialized anymore.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 24, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-aws-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-gcpUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-azure-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1013-azureUpgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.17.0-1012-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-generic-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-raspi-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-generic | Apr 17, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub