{"id":"CVE-2026-45955","title":"md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmd/md-llbitmap: fix percpu_ref not resurrected on suspend timeout\n\nWhen llbitmap_suspend_timeout() times out waiting for percpu_ref to\nbecome zero, it returns -ETIMEDOU…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 095417d6b669c2dec39a5842ccb94df915f97f54","Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 2446d099350185caeed19ab2c0270451a97296fb","Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < d119bd2e1643cc023210ff3c6f0657e4f914e71d","Linux 6.18"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T15:18:35.481520Z"},"published":"2026-05-27","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:20:47.494Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45955","references":[{"url":"https://git.kernel.org/stable/c/095417d6b669c2dec39a5842ccb94df915f97f54"},{"url":"https://git.kernel.org/stable/c/2446d099350185caeed19ab2c0270451a97296fb"},{"url":"https://git.kernel.org/stable/c/d119bd2e1643cc023210ff3c6f0657e4f914e71d"}],"tags":["cve.org"],"epss":0.00169,"epssPercentile":0.05834,"ingestedAt":"2026-10-16T17:24:46.701Z","slug":"CVE-2026-45955","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmd/md-llbitmap: fix percpu_ref not resurrected on suspend timeout\n\nWhen llbitmap_suspend_timeout() times out waiting for percpu_ref to\nbecome zero, it returns -ETIMEDOUT without resurrecting the percpu_ref.\nThe caller (md_llbitmap_daemon_fn) then continues to the next page\nwithout calling llbitmap_resume(), leaving the percpu_ref in a killed\nstate permanently.\n\nFix this by resurrecting the percpu_ref before returning the error,\nensuring the page control structure remains usable for subsequent\noperations.\n\n## Affected\n\n- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 095417d6b669c2dec39a5842ccb94df915f97f54`\n- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < 2446d099350185caeed19ab2c0270451a97296fb`\n- `Linux >= 5ab829f1971dc99f2aac10846c378e67fc875abc < d119bd2e1643cc023210ff3c6f0657e4f914e71d`\n- `Linux 6.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}