CVE-2026-46327 PUBLISHED

dm: fix unlocked test for dm_suspended_md

Assigner: Linux
Reserved: 13.05.2026 Published: 09.06.2026 Updated: 09.06.2026

In the Linux kernel, the following vulnerability has been resolved:

dm: fix unlocked test for dm_suspended_md

The function dm_blk_report_zones tests if the device is suspended with the "dm_suspended_md" call. However, this function is called without holding any locks, so the device may be suspended just after it.

Move the call to dm_suspended_md after dm_get_live_table, so that the device can't be suspended after the suspended state was tested.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f9c1bdf24615303d48a2d0fd629c88f3189563aa to 175ac0a6115400278d3900f5a04a58b17b3f6cd0 (excl.)
  • affected from 37f53a2c60d03743e0eacf7a0c01c279776fef4e to 7a3385e97af2b6f485fef11e82d8c29adee4be93 (excl.)
  • affected from 37f53a2c60d03743e0eacf7a0c01c279776fef4e to d809a36692ee1394cac85ce6ba7cf8ea58da5812 (excl.)
  • affected from 37f53a2c60d03743e0eacf7a0c01c279776fef4e to 24c405fdbe215c45e57bba672cc42859038491ee (excl.)
  • Version d19bc1b4dd5f322980b1f05f79b2ea4f0db10920 is affected
  • affected from 6.12.34 to 6.12.75 (excl.)
  • affected from 6.15.3 to 6.16 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.16 is affected
  • unaffected from 0 to 6.16 (excl.)
  • unaffected from 6.12.75 to 6.12.* (incl.)
  • unaffected from 6.18.14 to 6.18.* (incl.)
  • unaffected from 6.19.4 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References