Back to CVE records
Medium 5.5Published May 8, 2026

CVE-2026-43309md raid: fix hang when stopping arrays with metadata through dm-raid

Updated under an hour ago ()

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices) - The top-level RAID device is then removed Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block. Fix: - Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O - Still allow write-intent bitmap flushing when called from dm-raid suspend context This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state. This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.

CVSS
5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Modified
Record last updated
Oct 21, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 0dd84b319352bb8ba64752d4e45396d8b13e6018 before 63054027d95200b04f3cf624faa7817e0555d56a; from 0dd84b319352bb8ba64752d4e45396d8b13e6018 before 24783dd06de870d646c25207bae186f78195f912; from 0dd84b319352bb8ba64752d4e45396d8b13e6018 before 338378dfffbdbb8d37a18f0a0c0358812671f91e; from 0dd84b319352bb8ba64752d4e45396d8b13e6018 before cefcb9297fbdb6d94b61787b4f8d84f55b741470; 1678ca35b80a94d474fdc31e2497ce5d7ed52512; 690b5c90fd2d81fd1d2b6110fa36783232f6dce2; 8e7fb19f1a744fd34e982633ced756fee0498ef7; a5a58fab556bfe618b4c9719eb85712d78c6cb10; and 8 more ranges
CNA record
linux linux_kernel
linux:linux_kernel
from 4.14.292 before 4.15; from 4.19.257 before 4.20; from 5.4.212 before 5.5; from 5.10.140 before 5.11; from 5.15.64 before 5.16; from 5.19.6 before 6.0; from 6.0.1 before 6.18.16; from 6.19 before 6.19.6; and 6 more ranges
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.