md raid: fix hang when stopping arrays with metadata through dm-raid
CVE-2026-43309 is fixed in 38 products on 1 platform, first by ALAS2023-2026-1702, released May 11, 2026. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices) - The top-level RAID device is then removed Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block. Fix: - Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O - Still allow write-intent bitmap flushing when called from dm-raid suspend context This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state. This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool6.18 · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| bpftool6.18-debuginfo · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-azure · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-azure · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-azure · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-default · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23237-1 | Aug 11, 2026 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.37.1.160000.2.19 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.78.1.150700.17.43.2 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-docs · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-livepatch-6.18.16-18.222 · amzn 2023 | 1:1.0-0.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel-livepatch-SLE15-SP7-RT_Update_19 · sles 15.7 | 1-150700.1.5.1 | SUSE-SU-2026:3810-1 | Aug 26, 2026 |
| kernel-livepatch-SLE15-SP7_Update_20 · sles 15.7 | 1-150700.15.3.2 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-source · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-syms · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.37.1 | OPENSUSE-SU-2026:21555-1 | Aug 12, 2026 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 | Aug 25, 2026 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1 | Aug 11, 2026 |
| kernel6.18 · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-debuginfo · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-debuginfo-common-aarch64 · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-debuginfo-common-x86_64 · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-devel · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-headers · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-libbpf · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-libbpf-debuginfo · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-libbpf-devel · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-libbpf-static · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-modules-extra · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-modules-extra-common · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-tools · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-tools-debuginfo · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| kernel6.18-tools-devel · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| linux · Debian 13.5 (trixie) | 6.12.115-2 | DEBIAN-CVE-2026-43309 | May 15, 2026 |
| linux · Debian 14 | 6.19.6-1 | DEBIAN-CVE-2026-43309 | May 15, 2026 |
| perf6.18 · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| perf6.18-debuginfo · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| python3-perf6.18 · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
| python3-perf6.18-debuginfo · amzn 2023 | 1:6.18.16-18.222.amzn2023 | ALAS2023-2026-1702 | May 11, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.