{"id":"CVE-2026-46327","title":"dm: fix unlocked test for dm_suspended_md","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix unlocked test for dm_suspended_md\n\nThe function dm_blk_report_zones tests if the device is suspended with\nthe \"dm_suspended_md\" call. However, this function is …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= f9c1bdf24615303d48a2d0fd629c88f3189563aa < 175ac0a6115400278d3900f5a04a58b17b3f6cd0","Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < 7a3385e97af2b6f485fef11e82d8c29adee4be93","Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < d809a36692ee1394cac85ce6ba7cf8ea58da5812","Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < 24c405fdbe215c45e57bba672cc42859038491ee","Linux d19bc1b4dd5f322980b1f05f79b2ea4f0db10920","Linux >= 6.12.34 < 6.12.75","Linux >= 6.15.3 < 6.16","Linux 6.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:22:16.430684Z"},"published":"2026-06-09","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:31:17.435Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46327","references":[{"url":"https://git.kernel.org/stable/c/175ac0a6115400278d3900f5a04a58b17b3f6cd0"},{"url":"https://git.kernel.org/stable/c/7a3385e97af2b6f485fef11e82d8c29adee4be93"},{"url":"https://git.kernel.org/stable/c/d809a36692ee1394cac85ce6ba7cf8ea58da5812"},{"url":"https://git.kernel.org/stable/c/24c405fdbe215c45e57bba672cc42859038491ee"}],"tags":["cve.org"],"epss":0.00175,"epssPercentile":0.06538,"ingestedAt":"2026-10-16T17:24:46.718Z","slug":"CVE-2026-46327","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix unlocked test for dm_suspended_md\n\nThe function dm_blk_report_zones tests if the device is suspended with\nthe \"dm_suspended_md\" call. However, this function is called without\nholding any locks, so the device may be suspended just after it.\n\nMove the call to dm_suspended_md after dm_get_live_table, so that the\ndevice can't be suspended after the suspended state was tested.\n\n## Affected\n\n- `Linux >= f9c1bdf24615303d48a2d0fd629c88f3189563aa < 175ac0a6115400278d3900f5a04a58b17b3f6cd0`\n- `Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < 7a3385e97af2b6f485fef11e82d8c29adee4be93`\n- `Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < d809a36692ee1394cac85ce6ba7cf8ea58da5812`\n- `Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < 24c405fdbe215c45e57bba672cc42859038491ee`\n- `Linux d19bc1b4dd5f322980b1f05f79b2ea4f0db10920`\n- `Linux >= 6.12.34 < 6.12.75`\n- `Linux >= 6.15.3 < 6.16`\n- `Linux 6.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}