CVE-2026-43271

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the process metadata update() function. During the MD array startup sequence (md run), a race condition occurs where the cluster recv thread is active and processing messages before the main MD thread mddev->thread is initialized. If a METADATA UPDATED message is received from a remote node during this window, the function blindly dereferences the thread pointer within the wait event() macro, resulting in a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.