-

CVE-2026-90385

md/raid1: create serial pool adding rdev to array with serialize_policy=1

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: create serial pool adding rdev to array with serialize_policy=1

The following bug has been observed with kernel 7.1.3 after adding a new
rdev to an existing RAID1 array with serialize_policy enabled:

  Oops: 0002 [#1]
  CPU: 0 UID: 0 PID: 19639 Comm: ext4lazyinit Not tainted 7.1.3-1-default
  RIP: _raw_spin_lock_irqsave+0x27/0x50
  CR2: 0000000000004960
  Call Trace:
   wait_for_serialization+0xb9/0x260 [raid1]
   raid1_make_request+0x762/0xaff [raid1]
   md_handle_request+0x1c9/0x2e0 [md_mod]

The raid1.c code calls wait_for_serialization() if the MD_SERIALIZE_POLICY
is set, and wait_for_serialization assumes that rdev->serial is
initialized. Normally this will be the case for arrays that have
the serialize_policy sysfs attribute set to 1.

But when a new rdev is added to an existing array in bind_rdev_to_array(),
the condition at mddev_create_serial_pool() causes creation of rdev->serial
to be skipped. Fix it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 69b00b5bb23552d43e8bbed73ef6624604bb94a2
Version < f9e4364449f7ca6917f3599eb32064dba5b7b147
Status affected
Version 69b00b5bb23552d43e8bbed73ef6624604bb94a2
Version < 37f11973c3eb72a5eb061082cad529bb6939c24f
Status affected
Version 69b00b5bb23552d43e8bbed73ef6624604bb94a2
Version < c02d675e81468003e4f2253b616c53729070d712
Status affected
Version 69b00b5bb23552d43e8bbed73ef6624604bb94a2
Version < 140234b2380ffb8ffb0cfc46fee0e822f43adef7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.6
Status affected
Version 0
Version < 5.6
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.102
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f9e4364449f7ca6917f3599eb32064dba5b7b147
https://git.kernel.org/stable/c/37f11973c3eb72a5eb061082cad529bb6939c24f
https://git.kernel.org/stable/c/c02d675e81468003e4f2253b616c53729070d712
https://git.kernel.org/stable/c/140234b2380ffb8ffb0cfc46fee0e822f43adef7