CVE-2026-45955 Details
Description
In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout When llbitmap_suspend_timeout() times out waiting for percpu_ref to become zero, it returns -ETIMEDOUT without resurrecting the percpu_ref. The caller (md_llbitmap_daemon_fn) then continues to the next page without calling llbitmap_resume(), leaving the percpu_ref in a killed state permanently. Fix this by resurrecting the percpu_ref before returning the error, ensuring the page control structure remains usable for subsequent operations.
A vulnerability exists in the Linux kernel's MD-LLBitmap management, where the per-CPU reference count is not properly restored after a suspension timeout. This issue leaves the reference in a permanently 'killed' state, rendering the associated page control structure unusable for future operations. The problem arises when the 'llbitmap_suspend_timeout' function times out while waiting for the reference count to drop to zero. Instead of reviving the reference, it returns a timeout error, allowing the calling function to skip the necessary resumption process.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/095417d6b669c2dec39a5842ccb94df915f97f54 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2446d099350185caeed19ab2c0270451a97296fb | kernel.org | Patch |
| https://git.kernel.org/stable/c/d119bd2e1643cc023210ff3c6f0657e4f914e71d | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.18, < 6.18.14 >= 6.19, < 6.19.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 16, 2026 | Initial Analysis | [email protected] |
| Jun 5, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |