CVE-2026-90390

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlog_store() error path backlog_store() suspends the array before checking whether a write-mostly device exists. If no such device exists, the error path only unlocks reconfig_mutex and leaves the array suspended, blocking subsequent I/O. Use mddev_unlock_and_resume() to release both states.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linux03aad318f0a1f039dddf98739e705fdca3bf0d86, 6763fb409a0b4106676a52cf934440d9484b32c8, cc543e769b97d563b089b9e0ebf8ad361d15076f, 2911cd0a0f4366a7e06832bc5f0a7fdcc138e4dc or later

Affected products

ProductAffected versionsFixed in
Linux Linux58226942ad3d1423785f815ede5bcc832574f2ea ≤ v < 03aad318f0a1f039dddf98739e705fdca3bf0d86, 58226942ad3d1423785f815ede5bcc832574f2ea ≤ v < 6763fb409a0b4106676a52cf934440d9484b32c8, 58226942ad3d1423785f815ede5bcc832574f2ea ≤ v < cc543e769b97d563b089b9e0ebf8ad361d15076f, 58226942ad3d1423785f815ede5bcc832574f2ea ≤ v < 2911cd0a0f4366a7e06832bc5f0a7fdcc138e4dc, 6.703aad318f0a1f039dddf98739e705fdca3bf0d86, 6763fb409a0b4106676a52cf934440d9484b32c8, cc543e769b97d563b089b9e0ebf8ad361d15076f, 2911cd0a0f4366a7e06832bc5f0a7fdcc138e4dc

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-90390 · Linux · Dark Radar