CVE-2026-90278

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the md stop() function where the bitmap is destroyed before mddev detach() is called. This sequence causes mddev detach() to skip the bitmap ops->wait behind writes() operation because the bitmap is already disconnected from the mddev. While legacy bitmaps handle this internally, the llbitmap implementation performs the wait within the wait behind writes() operation and uses the destroy() function to tear down storage. Consequently, in RAID1 configurations, behind-write completions may execute after the llbitmap storage has been freed, potentially leading to memory corruption or system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.