md subsystem

A critical race-condition bug in the Linux kernel’s MD (Multiple Devices) subsystem — tracked as CVE-2025-22126 — was fixed upstream after researchers identified a use‑after‑free (UAF) that can occur when the kernel iterates the global list of md devices. The fix addresses a subtle iterator /...

A subtle race-condition fix in the Linux kernel’s md (multiple device/RAID) subsystem — tracked as CVE-2024-26758 — has been published to address a scenario where the md daemon can hang because the recovery thread unregistering logic incorrectly ignores suspended arrays, creating a reliable...