CVE-2026-72439

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_make_request() acquires a writes_pending reference with md_write_start() before dispatching write requests. Several failure paths in raid10_write_request() complete the bio and return without reaching the normal write completion path, causing the corresponding md_write_end() to be skipped. Make raid10_write_request() return a status indicating whether the write request was successfully queued. This allows raid10_make_request() to release the writes_pending reference with md_write_end() when a write request fails.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275d
https://git.kernel.org/stable/c/f94031c94eaebe14a7c9e91720064de0c5a54a6c

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:19

NVD link : CVE-2026-72439

Mitre link : CVE-2026-72439

CVE.ORG link : CVE-2026-72439

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72439", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c9aa889b035fca4598ae985a0f0c76ebbb547ad2", "lessThan": "f94031c94eaebe14a7c9e91720064de0c5a54a6c", "versionType": "git"}, {"status": "affected", "version": "c9aa889b035fca4598ae985a0f0c76ebbb547ad2", "lessThan": "e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275d", "versionType": "git"}, {"status": "affected", "version": "39db562b3fedb93978a7e42dd216b306740959f8", "versionType": "git"}, {"status": "affected", "version": "5.15.111", "lessThan": "5.16", "versionType": "semver"}], "programFiles": ["drivers/md/raid10.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.17"}, {"status": "unaffected", "version": "0", "lessThan": "5.17", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/md/raid10.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:17.753", "references": [{"url": "https://git.kernel.org/stable/c/e045d6ed33f8faa3e3dd6dc33c62ec01e3ad275d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f94031c94eaebe14a7c9e91720064de0c5a54a6c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix writes_pending leak on write request failures\n\nraid10_make_request() acquires a writes_pending reference with\nmd_write_start() before dispatching write requests. Several failure\npaths in raid10_write_request() complete the bio and return without\nreaching the normal write completion path, causing the corresponding\nmd_write_end() to be skipped.\n\nMake raid10_write_request() return a status indicating whether the write\nrequest was successfully queued. This allows raid10_make_request() to\nrelease the writes_pending reference with md_write_end() when a write\nrequest fails."}], "lastModified": "2026-08-17T06:19:11.283", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}