CVE-2026-45955 PUBLISHED

md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout

Assigner: Linux
Reserved: 13.05.2026 Published: 27.05.2026 Updated: 27.05.2026

In the Linux kernel, the following vulnerability has been resolved:

md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout

When llbitmap_suspend_timeout() times out waiting for percpu_ref to become zero, it returns -ETIMEDOUT without resurrecting the percpu_ref. The caller (md_llbitmap_daemon_fn) then continues to the next page without calling llbitmap_resume(), leaving the percpu_ref in a killed state permanently.

Fix this by resurrecting the percpu_ref before returning the error, ensuring the page control structure remains usable for subsequent operations.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 5ab829f1971dc99f2aac10846c378e67fc875abc to 095417d6b669c2dec39a5842ccb94df915f97f54 (excl.)
  • affected from 5ab829f1971dc99f2aac10846c378e67fc875abc to 2446d099350185caeed19ab2c0270451a97296fb (excl.)
  • affected from 5ab829f1971dc99f2aac10846c378e67fc875abc to d119bd2e1643cc023210ff3c6f0657e4f914e71d (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.18 is affected
  • unaffected from 0 to 6.18 (excl.)
  • unaffected from 6.18.14 to 6.18.* (incl.)
  • unaffected from 6.19.4 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References