CVE-2026-72439
Received Received - Intake

Memory Leak in Linux Kernel RAID10

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on write request failures raid10_make_request() acquires a writes_pending reference with md_write_start() before dispatching write requests. Several failure paths in raid10_write_request() complete the bio and return without reaching the normal write completion path, causing the corresponding md_write_end() to be skipped. Make raid10_write_request() return a status indicating whether the write request was successfully queued. This allows raid10_make_request() to release the writes_pending reference with md_write_end() when a write request fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72439
EUVD
EUVD-2026-59338

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the RAID10 driver. When write requests fail, the system does not properly release a reference counter called writes_pending, which can lead to resource exhaustion over time.

Detection Guidance

This vulnerability affects the Linux kernel's RAID10 implementation and may lead to resource leaks during write request failures. Detection requires checking kernel logs for RAID10-related errors or warnings, particularly during write operations. Commands like dmesg | grep raid10 or journalctl -k | grep raid10 may help identify issues. Ensure your kernel version is updated to a patched release.

Impact Analysis

If exploited, this flaw could cause system instability or crashes due to resource exhaustion. It primarily affects systems using RAID10 configurations with write operations, potentially leading to denial-of-service conditions.

Mitigation Strategies

Immediately update the Linux kernel to a version that includes the fix for this vulnerability. Monitor system logs for RAID10-related errors post-update. If RAID10 is in use, verify write operations complete successfully to prevent resource leaks. Apply patches from your distribution vendor if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72439. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart