---
id: CVE-2026-46327
title: 'dm: fix unlocked test for dm_suspended_md'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dm: fix unlocked test for dm_suspended_md

  The function dm_blk_report_zones tests if the device is suspended with
  the "dm_suspended_md" call. However, this function is …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f9c1bdf24615303d48a2d0fd629c88f3189563aa <
    175ac0a6115400278d3900f5a04a58b17b3f6cd0
  - >-
    Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e <
    7a3385e97af2b6f485fef11e82d8c29adee4be93
  - >-
    Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e <
    d809a36692ee1394cac85ce6ba7cf8ea58da5812
  - >-
    Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e <
    24c405fdbe215c45e57bba672cc42859038491ee
  - Linux d19bc1b4dd5f322980b1f05f79b2ea4f0db10920
  - Linux >= 6.12.34 < 6.12.75
  - Linux >= 6.15.3 < 6.16
  - Linux 6.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:22:16.430684Z'
published: '2026-06-09'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:31:17.435Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-46327'
references:
  - url: 'https://git.kernel.org/stable/c/175ac0a6115400278d3900f5a04a58b17b3f6cd0'
  - url: 'https://git.kernel.org/stable/c/7a3385e97af2b6f485fef11e82d8c29adee4be93'
  - url: 'https://git.kernel.org/stable/c/d809a36692ee1394cac85ce6ba7cf8ea58da5812'
  - url: 'https://git.kernel.org/stable/c/24c405fdbe215c45e57bba672cc42859038491ee'
tags:
  - cve.org
epss: 0.00175
epssPercentile: 0.06538
ingestedAt: '2026-10-16T17:24:46.718Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dm: fix unlocked test for dm_suspended_md

The function dm_blk_report_zones tests if the device is suspended with
the "dm_suspended_md" call. However, this function is called without
holding any locks, so the device may be suspended just after it.

Move the call to dm_suspended_md after dm_get_live_table, so that the
device can't be suspended after the suspended state was tested.

## Affected

- `Linux >= f9c1bdf24615303d48a2d0fd629c88f3189563aa < 175ac0a6115400278d3900f5a04a58b17b3f6cd0`
- `Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < 7a3385e97af2b6f485fef11e82d8c29adee4be93`
- `Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < d809a36692ee1394cac85ce6ba7cf8ea58da5812`
- `Linux >= 37f53a2c60d03743e0eacf7a0c01c279776fef4e < 24c405fdbe215c45e57bba672cc42859038491ee`
- `Linux d19bc1b4dd5f322980b1f05f79b2ea4f0db10920`
- `Linux >= 6.12.34 < 6.12.75`
- `Linux >= 6.15.3 < 6.16`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.