CVE-2026-46050

A flaw was found in the Linux kernel's md/raid10 component. A local user performing a check operation while an application is doing nowait I/O (Input/Output) on the same array can trigger a deadlock. This occurs because the nr_pending value underflows, causing the md resync thread to become stuck. This can lead to a Denial of Service (DoS) condition, making the system unresponsive.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires a specific confluence of events on systems actively using software RAID10: an array verification must execute concurrently with non-blocking I/O operations from an application. While triggering this race condition can lead to a kernel hang and denial of service, it cannot be triggered remotely, does not compromise data integrity or confidentiality, and does not allow privilege escalation. Systems that do not deploy software RAID10 devices remain unaffected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.