PT-2026-52017 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53123

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock can occur during a raid456 reshape process. Direct IO across the reshape position may sleep in the raid5 make request() function while waiting for reshape progress and holding an active io reference. If the reshape is frozen by userspace and a suspend command is issued via 'md/suspend lo' or 'md/suspend hi', the mddev suspend() function attempts to kill active io and wait for in-flight IO to drain. Because the IO requires reshape progress to continue but the reshape thread is frozen, the active io reference is not dropped, preventing the suspend process from completing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53123

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-53123 · Security Note
• https://git.kernel.org/stable/c/8ae3e14d7f3df58f7f49c02d74344e3dcd5f84f0 · Note
• https://twitter.com/CVEnew/status/2069845528628895769 · Twitter Post
• https://git.kernel.org/stable/c/8b6a72420821e6da2cab6a69d5233500d2698b93 · Note
• https://twitter.com/infoflowcloud/status/2069847111483404698 · Twitter Post
• https://git.kernel.org/stable/c/cf86bb53b9c92354904a328e947a05ffbfdd1840 · Note
• https://git.kernel.org/stable/c/ff6b93410192b812d73cc54062529715b2dc849f · Note