Description
In the Linux kernel, the following vulnerability has been resolved:

md/raid10: fix writes_pending leak on write request failures

raid10_make_request() acquires a writes_pending reference with
md_write_start() before dispatching write requests. Several failure
paths in raid10_write_request() complete the bio and return without
reaching the normal write completion path, causing the corresponding
md_write_end() to be skipped.

Make raid10_write_request() return a status indicating whether the write
request was successfully queued. This allows raid10_make_request() to
release the writes_pending reference with md_write_end() when a write
request fails.
Published: 2026-08-15
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In RAID‑10 write operations the kernel acquired writes_pending references that were not released when write requests failed, creating a reference leak and allowing kernel memory or resource counters to grow uncontrollably. The consequence is a degradation of system performance and a potential kernel panic, effectively a denial of service. The weakness can be categorised as an uncontrolled resource consumption flaw.

Affected Systems

The bug is present in all Linux kernel builds that were in use before the upstream patch was applied. Any distribution shipping an older kernel that does not include the change from the commit identifiers cited in the references is potentially affected.

Risk and Exploitability

No EPSS score is available and the issue is not listed in the CISA KEV catalog, but the possibility of an uncontrolled resource leak makes the risk high. The likely attack vector involves a write request failure that can be triggered by malformed input or an internal error, which typically requires local or privileged access. The patch that removes the leak is the definitive fix.

Generated by OpenCVE AI on August 15, 2026 at 11:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to a version that includes the commits correcting the writes_pending leak, ensuring raid10_make_request releases the reference on failure.
  • Verify that the updated kernel no longer logs write failures without releasing writes_pending, indicating the patch is effective.
  • Monitor system stability and kernel logs for raid‑10 write errors after the update to confirm the issue has been resolved.

Generated by OpenCVE AI on August 15, 2026 at 11:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399
CWE-404

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_make_request() acquires a writes_pending reference with md_write_start() before dispatching write requests. Several failure paths in raid10_write_request() complete the bio and return without reaching the normal write completion path, causing the corresponding md_write_end() to be skipped. Make raid10_write_request() return a status indicating whether the write request was successfully queued. This allows raid10_make_request() to release the writes_pending reference with md_write_end() when a write request fails.
Title md/raid10: fix writes_pending leak on write request failures
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:56:52.023Z

Reserved: 2026-08-09T03:40:39.930Z

Link: CVE-2026-72439

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:17.753

Modified: 2026-08-15T06:22:17.753

Link: CVE-2026-72439

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T12:00:05Z

Weaknesses