---
id: CVE-2026-45953
title: 'md/raid5: fix IO hang with degraded array with llbitmap'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  md/raid5: fix IO hang with degraded array with llbitmap

  When llbitmap bit state is still unwritten, any new write should force
  rcw, as bitmap_ops->blocks_synced() is c…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc <
    870b9f15867b0e70f3459ef3974b043e8b229690
  - >-
    Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc <
    28ef299e7a5b81817f8ca8297c2ddff28f5da5e8
  - >-
    Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc <
    cd1635d844d26471c56c0a432abdee12fc9ad735
  - Linux 6.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:02:58.993655Z'
published: '2026-05-27'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:03:16.341Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-45953'
references:
  - url: 'https://git.kernel.org/stable/c/870b9f15867b0e70f3459ef3974b043e8b229690'
  - url: 'https://git.kernel.org/stable/c/28ef299e7a5b81817f8ca8297c2ddff28f5da5e8'
  - url: 'https://git.kernel.org/stable/c/cd1635d844d26471c56c0a432abdee12fc9ad735'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01898
ingestedAt: '2026-11-06T16:57:43.373Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

md/raid5: fix IO hang with degraded array with llbitmap

When llbitmap bit state is still unwritten, any new write should force
rcw, as bitmap_ops->blocks_synced() is checked in handle_stripe_dirtying().
However, later the same check is missing in need_this_block(), causing
stripe to deadloop during handling because handle_stripe() will decide
to go to handle_stripe_fill(), meanwhile need_this_block() always return
0 and nothing is handled.

## Affected

- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 870b9f15867b0e70f3459ef3974b043e8b229690`
- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8`
- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < cd1635d844d26471c56c0a432abdee12fc9ad735`
- `Linux 6.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
