CVE-2026-90279

md/raid5: round bitmap stripes with sector division

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid5: round bitmap stripes with sector division

raid5_bitmap_sector_map() aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunk_sectors multiplied by the number of data disks, and it is not always a power of two.

Reproduce with a 4-disk RAID5, 1024-sector chunks, and three data disks. The full-stripe width is 3072 sectors. For a one-sector write at array sector 3072, correct rounding gives array range [3072, 6144), which maps to component range [1024, 2048). The old round_down()/round_up() logic instead gives [1024, 4096), which maps to [0, 1024).

Use sector_div() based arithmetic so the rounded range is aligned to the actual RAID5 stripe width.

The deterministic mapper test now reports the fixed component range as [1024, 2048), while the old mask-based range was [0, 1024).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b29e6400be51c214a0ad30dce937348b57abe33a to before 9d7490007707f90691911385365bd1d691d99225Affected
  • aa8e15d69f5c0044d5bff61844e163aacc4ac172 to before cab7d949b18b2f1cd625689dc16c5f81236bac93Affected
  • 9c89f604476cf15c31fbbdb043cff7fbf1dbe0cb to before 02c10581866d08822c6348e299881485fc546185Affected
  • 9c89f604476cf15c31fbbdb043cff7fbf1dbe0cb to before ccbdc483eb041eef809e9ff223d1ad63518a2c52Affected
  • 9c89f604476cf15c31fbbdb043cff7fbf1dbe0cb to before 17ea021ae74987d6064c8195c4922fa025753892Affected
  • a41a0df5d7638acf15e723ad985980b4f7ff9383Affected
  • 6.6.79 to before 6.6.157Affected
  • 6.12.13 to before 6.12.110Affected
  • 6.13.2 to before 6.14Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.