CVE-2026-72439

md/raid10: fix writes_pending leak on write request failures

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Oct 30, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix writes_pending leak on write request failures

raid10_make_request() acquires a writes_pending reference with md_write_start() before dispatching write requests. Several failure paths in raid10_write_request() complete the bio and return without reaching the normal write completion path, causing the corresponding md_write_end() to be skipped.

Make raid10_write_request() return a status indicating whether the write request was successfully queued. This allows raid10_make_request() to release the writes_pending reference with md_write_end() when a write request fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before 55dc3d1d6a9983867273d3531e3ddd743428db8dAffected c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before f076460c5205c9687059e5a3afeed37d2f2ceb6bAffected c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before b6667d925c274910423385042edf18f6788dbcebAffected c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before c642583adc136d4c70ce3c65c3f43e847d26c776Affected c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before f94031c94eaebe14a7c9e91720064de0c5a54a6cAffected c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275dAffected 39db562b3fedb93978a7e42dd216b306740959f8Affected 5.15.111 to before 5.16Affected
LinuxLinux	5.17Affected before 5.17Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before 55dc3d1d6a9983867273d3531e3ddd743428db8dAffected
c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before f076460c5205c9687059e5a3afeed37d2f2ceb6bAffected
c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before b6667d925c274910423385042edf18f6788dbcebAffected
c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before c642583adc136d4c70ce3c65c3f43e847d26c776Affected
c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before f94031c94eaebe14a7c9e91720064de0c5a54a6cAffected
c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275dAffected
39db562b3fedb93978a7e42dd216b306740959f8Affected
5.15.111 to before 5.16Affected

LinuxLinux

5.17Affected
before 5.17Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.