{"id":"CVE-2026-45953","title":"md/raid5: fix IO hang with degraded array with llbitmap","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: fix IO hang with degraded array with llbitmap\n\nWhen llbitmap bit state is still unwritten, any new write should force\nrcw, as bitmap_ops->blocks_synced() is c…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 870b9f15867b0e70f3459ef3974b043e8b229690","Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8","Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < cd1635d844d26471c56c0a432abdee12fc9ad735","Linux 6.18"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:02:58.993655Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:03:16.341Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45953","references":[{"url":"https://git.kernel.org/stable/c/870b9f15867b0e70f3459ef3974b043e8b229690"},{"url":"https://git.kernel.org/stable/c/28ef299e7a5b81817f8ca8297c2ddff28f5da5e8"},{"url":"https://git.kernel.org/stable/c/cd1635d844d26471c56c0a432abdee12fc9ad735"}],"tags":["cve.org"],"epss":0.00121,"epssPercentile":0.01898,"ingestedAt":"2026-11-06T16:57:43.373Z","slug":"CVE-2026-45953","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: fix IO hang with degraded array with llbitmap\n\nWhen llbitmap bit state is still unwritten, any new write should force\nrcw, as bitmap_ops->blocks_synced() is checked in handle_stripe_dirtying().\nHowever, later the same check is missing in need_this_block(), causing\nstripe to deadloop during handling because handle_stripe() will decide\nto go to handle_stripe_fill(), meanwhile need_this_block() always return\n0 and nothing is handled.\n\n## Affected\n\n- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 870b9f15867b0e70f3459ef3974b043e8b229690`\n- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8`\n- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < cd1635d844d26471c56c0a432abdee12fc9ad735`\n- `Linux 6.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}