CVE-2026-43314
MediumSummary
In the Linux kernel, a fake timeout has been removed to avoid request leaks. This change requires drivers to be responsible for calling blk_should_fake_timeout() at appropriate code paths.
Risk Assessment
Failure to properly call the function by drivers may lead to request leaks, potentially affecting system stability and data security.
Recommendation
It is recommended to update the Linux kernel to the latest version to benefit from the fixes related to this vulnerability and to test drivers for correct function calls.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request Since commit 15f73f5b3e59 ("blk-mq: move failure injection out of blk_mq_complete_request"), drivers are responsible for calling blk_should_fake_timeout() at appropriate code paths and