CVE-2026-72438md/raid10: fix writes_pending and barrier reference leaks on discard failures
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard failures raid10_make_request() acquires a writes_pending reference with md_write_start() before calling raid10_handle_discard(). Several failure paths in raid10_handle_discard() complete the bio and return without releasing the corresponding reference, causing md_write_end() to be skipped. Call md_write_end() before returning from these failure paths to keep writes_pending accounting balanced. Additionally, discard split allocation failures can occur after wait_barrier() succeeds. Those paths return without calling allow_barrier(), leaking the associated barrier reference. Release the barrier before returning from those paths.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c9aa889b035fca4598ae985a0f0c76ebbb547ad2 before fea33968592559a55a3f5a96a6386bebcaf988a8; from c9aa889b035fca4598ae985a0f0c76ebbb547ad2 before 11b35d1906a7277a3d64afe34224133b44327328; from c9aa889b035fca4598ae985a0f0c76ebbb547ad2 before d1324b41dabd26787559efaeb430643c627c1eb0; from c9aa889b035fca4598ae985a0f0c76ebbb547ad2 before 393d687131d8aa8c7e4de2cb494438e145d20fc2; 39db562b3fedb93978a7e42dd216b306740959f8; from 5.15.111 before 5.16 | CNA record |
References
- https://git.kernel.org/stable/c/fea33968592559a55a3f5a96a6386bebcaf988a8
- https://git.kernel.org/stable/c/11b35d1906a7277a3d64afe34224133b44327328
- https://git.kernel.org/stable/c/d1324b41dabd26787559efaeb430643c627c1eb0
- https://git.kernel.org/stable/c/393d687131d8aa8c7e4de2cb494438e145d20fc2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.