Riskcovery

CVE-2026-45955

md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout

State
Published
Severity
7.1 High
Published
May 27, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout

When llbitmap_suspend_timeout() times out waiting for percpu_ref to become zero, it returns -ETIMEDOUT without resurrecting the percpu_ref. The caller (md_llbitmap_daemon_fn) then continues to the next page without calling llbitmap_resume(), leaving the percpu_ref in a killed state permanently.

Fix this by resurrecting the percpu_ref before returning the error, ensuring the page control structure remains usable for subsequent operations.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HLinux

Weaknesses

  • CWE-404 Improper Resource Shutdown or Release

Affected Products

ProductVersions
LinuxLinux
  • 5ab829f1971dc99f2aac10846c378e67fc875abc to before 095417d6b669c2dec39a5842ccb94df915f97f54Affected
  • 5ab829f1971dc99f2aac10846c378e67fc875abc to before 2446d099350185caeed19ab2c0270451a97296fbAffected
  • 5ab829f1971dc99f2aac10846c378e67fc875abc to before d119bd2e1643cc023210ff3c6f0657e4f914e71dAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.