CVE-2026-93262

A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service (DoS) or potentially escalate privileges through a use-after-free vulnerability in the RAID-5 Partial Parity Log (PPL) component. During flush operations, the system improperly continues to access an input/output (I/O) tracking structure after it has already been released. This memory corruption can destabilize the operating system and cause the kernel to crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the raid456 kernel module from loading if software RAID 4, 5, or 6 functionality is not required.

1. Add the blacklist configuration by creating /etc/modprobe.d/blacklist-raid456.conf with the following entries: blacklist raid456 install raid456 /bin/true

2. Unload the module if it is currently loaded:

modprobe -r raid456

Warning: If software RAID 4, 5, or 6 is currently in use or required for storage arrays, this workaround cannot be applied, as disabling the module will prevent storage devices from functioning. A system reboot may be required if the module is actively in use by existing mounts.