Linux Kernel up to 7.1.4 md/raid1 raid1_make_request denial of service

Summaryinfo

A vulnerability classified as critical has been found in Linux Kernel up to 7.1.4. Impacted is the function raid1_make_request of the component md/raid1. This manipulation causes denial of service. This vulnerability appears as CVE-2026-72440. The attack requires local access. There is no available exploit.

Detailsinfo

A vulnerability classified as critical was found in Linux Kernel up to 7.1.4. Affected by this vulnerability is the function raid1_make_request of the component md/raid1. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier reference leaks on write failures raid1_make_request() acquires a writes_pending reference with md_write_start() before calling raid1_write_request(). Several failure paths in raid1_write_request() complete the bio and return without reaching the normal write completion path, causing the corresponding md_write_end() to be skipped. Make raid1_write_request() return a status indicating whether the write request was successfully queued. This allows raid1_make_request() to call md_write_end() when raid1_write_request() fails. Additionally, if wait_blocked_rdev() fails after wait_barrier() succeeds, the associated barrier reference is not released. Call allow_barrier() before returning from that path to keep the barrier accounting balanced.

The advisory is shared at git.kernel.org. This vulnerability is known as CVE-2026-72440 since 08/09/2026. The exploitation appears to be easy. An attack has to be approached locally. Technical details are known, but no exploit is available.

Upgrading to version 7.1.5 or 7.2-rc1 eliminates this vulnerability. Applying the patch bffbbfcbd9393e315a7a4286dcd70e875265db9a/8e065a1602511282fc0da2dc89445e0eb71a681c is able to eliminate this problem.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.1.0
• 7.1.1
• 7.1.2
• 7.1.3
• 7.1.4

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion