CVE-2026-53128

drbd: Balance RCU calls in drbd_adm_dump_devices()

MEDIUM

5.5

CVSS Score

Published: June 24, 2026 at 04:30 PM UTC

Updated: July 6, 2026 at 03:46 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drbd: Balance RCU calls in drbd_adm_dump_devices() Make drbd_adm_dump_devices() call rcu_read_lock() before rcu_read_unlock() is called. This has been detected by the Clang thread-safety analyzer.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.5 ≤ v < 5.10.2584.5 ≤ v < 5.15.2094.5 ≤ v < 6.1.1754.5 ≤ v < 6.12.914.5 ≤ v < 6.18.334.5 ≤ v < 6.6.1414.5 ≤ v < 7.0.104.5 ≤ v < 7.15.11 ≤ v < 5.15.2095.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.336.19 ≤ v < 7.0.106.2 ≤ v < 6.6.1416.7 ≤ v < 6.12.914.5a55bbd375d1802141f0f043e2cd08f85c23d6209

Vendor states this is fixed in 1f112240531f0a0b437b2e001c1d89e8b25a8328 (fixed)

Vendor states this is fixed in 282e06e6d494a7bee85af78c747527b7d4009cc3 (fixed)

Vendor states this is fixed in 2b31e86387e60b3689339f0f0fbb4d3623d9d494 (fixed)

Vendor states this is fixed in 68ebb9183ac3621b96b18e046841eadb9508783c (fixed)

Vendor states this is fixed in 6cd27bcb71bb73f955d104cc3a62be6f83724392 (fixed)

Vendor states this is fixed in 8092713a10c19fa0f731b71b2853af4319ca54fd (fixed)

Vendor states this is fixed in 996d279f2c985d771d6cfdd923e447d825726e06 (fixed)

Vendor states this is fixed in ae12bb44b392637a8321ade305c883f9ffc0daea (fixed)

Vendor states this is fixed in 4.5 (unaffected)

Vendor states this is fixed in 5.10.258 (unaffected)

Vendor states this is fixed in 5.15.209 (unaffected)

Vendor states this is fixed in 6.1.175 (unaffected)