CVE-2026-46095

A flaw was found in the Linux kernel's RAID (Redundant Array of Independent Disks) driver component. A race condition can occur when the system attempts to write or discard data, as a necessary synchronization barrier is not properly established before critical state changes. This oversight could lead to unpredictable system behavior or compromise data integrity.

This vulnerability is rated as Moderate because exploitation requires local access to initiate write or discard requests on software RAID devices, limiting the blast radius to storage instability or local denial of service rather than remote code execution. The synchronization timing flaw specifically manifests during concurrent I/O operations against affected multi-device arrays. Standard Red Hat Enterprise Linux systems that do not configure software RAID volumes or that restrict block storage access to privileged administrators are not exposed to unprivileged exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.