CVE-2026-46051

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

md/raid5: fix soft lockup in retry_aligned_read()

When retry_aligned_read() encounters an overlapped stripe, it releases

the stripe via raid5_release_stripe() which puts it on the lockless

released_stripes llist. In the next raid5d loop iteration,

release_stripe_list() drains the stripe onto handle_list (since

STRIPE_HANDLE is set by the original IO), but retry_aligned_read()

runs before handle_active_stripes() and removes the stripe from

handle_list via find_get_stripe() -> list_del_init(). This prevents

handle_stripe() from ever processing the stripe to resolve the

overlap, causing an infinite loop and soft lockup.

Fix this by using __release_stripe() with temp_inactive_list instead

of raid5_release_stripe() in the failure path, so the stripe does not

go through the released_stripes llist. This allows raid5d to break out

of its loop, and the overlap will be resolved when the stripe is

eventually processed by handl

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References