CVE-2026-43309

md raid: fix hang when stopping arrays with metadata through dm-raid

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
Oct 21, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

md raid: fix hang when stopping arrays with metadata through dm-raid

When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions.

This occurs when:

- A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices)

- The top-level RAID device is then removed

Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block.

Fix:

- Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O

- Still allow write-intent bitmap flushing when called from dm-raid suspend context

This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state.

This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before 63054027d95200b04f3cf624faa7817e0555d56aAffected
  • 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before 24783dd06de870d646c25207bae186f78195f912Affected
  • 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before 338378dfffbdbb8d37a18f0a0c0358812671f91eAffected
  • 0dd84b319352bb8ba64752d4e45396d8b13e6018 to before cefcb9297fbdb6d94b61787b4f8d84f55b741470Affected
  • 1678ca35b80a94d474fdc31e2497ce5d7ed52512Affected
  • 690b5c90fd2d81fd1d2b6110fa36783232f6dce2Affected
  • 8e7fb19f1a744fd34e982633ced756fee0498ef7Affected
  • a5a58fab556bfe618b4c9719eb85712d78c6cb10Affected
  • 661c01b2181d9413c799127f13143583b69f20fdAffected
  • f42a9819ba84bed2e609a4dff56af37063dcabdcAffected
  • 4.14.292 to before 4.15Affected
  • 4.19.257 to before 4.20Affected
  • 5.4.212 to before 5.5Affected
  • 5.10.140 to before 5.11Affected
  • 5.15.64 to before 5.16Affected
  • 5.19.6 to before 5.20Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.