CVE-2026-43163

A flaw was found in the Linux kernel's md/bitmap component. This vulnerability involves a use-after-free race condition that occurs during array resize operations. When the bitmap_daemon_work() and __bitmap_resize() functions execute concurrently, they can access memory pages that have already been freed. This can lead to a General Protection Fault (GPF), which causes the system to crash, resulting in a denial of service.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and relies on winning a race condition during software RAID (md) array resize operations. In typical production environments, modifying array dimensions is an administrative task that is performed infrequently, substantially limiting the window of opportunity for an attack. A successful exploit leads to a kernel crash and denial of service via a General Protection Fault, with no direct risk to system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.