CVE-2026-46327CWE-362

CVE-2026-46327

High · published June 9, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dm: fix unlocked test for dm_suspended_md

The function dm_blk_report_zones tests if the device is suspended with

the "dm_suspended_md" call. However, this function is called without

holding any locks, so the device may be suspended just after it.

Move the call to dm_suspended_md after dm_get_live_table, so that the

device can't be suspended after the suspended state was tested.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-06-09T18:16Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12.34, < 6.12.756.12.75
linux/linux_kernel≥ 6.15.3, < 6.18.146.18.14
linux/linux_kernel≥ 6.19, < 6.19.46.19.4
References (4)
EPSS history
Timeline
  • 09 JUN 12:25Z
    dm: fix unlocked test for dm_suspended_md
    cvelistv5