CVE-2026-90275

kernel: md/raid1: don't set array_frozen in raid1_takeover()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 14, 2026

Description

A flaw was found in the Linux kernel's md/raid1 component. The raid1_takeover() function incorrectly sets a flag (array_frozen) that is not subsequently cleared. This issue can lead to a permanent stall of all input/output (I/O) operations to the RAID array, effectively causing a Denial of Service (DoS) for the affected system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-412 · Unrestricted Externally Accessible Lock