Medium 5.5Published Jun 24, 2026

CVE-2026-53128drbd: Balance RCU calls in drbd_adm_dump_devices()

Updated under an hour ago (Oct 26, 2026, 11:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbd_adm_dump_devices() Make drbd_adm_dump_devices() call rcu_read_lock() before rcu_read_unlock() is called. This has been detected by the Clang thread-safety analyzer.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a55bbd375d1802141f0f043e2cd08f85c23d6209 before ae12bb44b392637a8321ade305c883f9ffc0daea; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 68ebb9183ac3621b96b18e046841eadb9508783c; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 6cd27bcb71bb73f955d104cc3a62be6f83724392; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 282e06e6d494a7bee85af78c747527b7d4009cc3; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 8092713a10c19fa0f731b71b2853af4319ca54fd; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 996d279f2c985d771d6cfdd923e447d825726e06; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 1f112240531f0a0b437b2e001c1d89e8b25a8328; from a55bbd375d1802141f0f043e2cd08f85c23d6209 before 2b31e86387e60b3689339f0f0fbb4d3623d9d494	CNA record
linux linux_kernel linux:linux_kernel	from 4.5 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/ae12bb44b392637a8321ade305c883f9ffc0daea	patch
https://git.kernel.org/stable/c/68ebb9183ac3621b96b18e046841eadb9508783c	patch
https://git.kernel.org/stable/c/6cd27bcb71bb73f955d104cc3a62be6f83724392	patch
https://git.kernel.org/stable/c/282e06e6d494a7bee85af78c747527b7d4009cc3	patch
https://git.kernel.org/stable/c/8092713a10c19fa0f731b71b2853af4319ca54fd	patch
https://git.kernel.org/stable/c/996d279f2c985d771d6cfdd923e447d825726e06	patch
https://git.kernel.org/stable/c/1f112240531f0a0b437b2e001c1d89e8b25a8328	patch
https://git.kernel.org/stable/c/2b31e86387e60b3689339f0f0fbb4d3623d9d494	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.