CVE-2026-43309

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed device tree is suspended from top to bottom (the top-level RAID device is suspended first, followed by its underlying metadata and data devices) - The top-level RAID device is then removed Removing the top-level device triggers a hang in the following sequence: the dm-raid destructor calls md_stop(), which tries to flush the write-intent bitmap by writing to the metadata sub-devices. However, these devices are already suspended, making them unable to complete the write-intent operations and causing an indefinite block. Fix: - Prevent bitmap flushing when md_stop() is called from dm-raid destructor context and avoid a quiescing/unquescing cycle which could also cause I/O - Still allow write-intent bitmap flushing when called from dm-raid suspend context This ensures that RAID array teardown can complete successfully even when the underlying devices are in a suspended state. This second patch uses md_is_rdwr() to distinguish between suspend and destructor paths as elaborated on above.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 8, 2026
First seenMay 8, 2026

How to fix

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.14.292 ≤ v < 4.15, 4.19.257 ≤ v < 4.20, 5.4.212 ≤ v < 5.5, 5.10.140 ≤ v < 5.11, 5.15.64 ≤ v < 5.16, 5.19.6 ≤ v < 6.0, 6.0.1 ≤ v < 6.18.16, 6.19 ≤ v < 6.19.6, 6.04.15, 4.20, 5.5, 5.11, 5.16, 6.0, 6.18.16, 6.19.6
microsoft azl3_kernel_6.6.137.1-2No range specified—
microsoft azl3_kernel_6.6.152.1-1No range specified—
microsoft azl3_kernel_6.6.138.1-1No range specified—
microsoft azl3_kernel_6.6.139.1-1No range specified—
microsoft azl3_kernel_6.6.141.1-1No range specified—
microsoft azl3_kernel_6.6.143.1-1No range specified—
microsoft azl3_kernel_6.6.144.1-1No range specified—
microsoft azl3_kernel_6.6.145.2-1No range specified—
microsoft azl3_kernel_6.6.150.1-1No range specified—
microsoft azl3_kernel_6.6.157.1-1No range specified—
microsoft azl3_kernel_6.6.159.1-1No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-43309 · Linux Kernel · Dark Radar