Answer in brief
CVE-2026-45955 records a Unknown severity vulnerability in md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5ab829f1971dc99f2aac10846c378e67fc875abc <095417d6b669c2dec39a5842ccb94df915f97f54 || >=5ab829f1971dc99f2aac10846c378e67fc875abc <2446d099350185caeed19ab2c0270451a97296fb || >=5ab829f1971dc99f2aac10846c378e67fc875abc <d119bd2e1643cc023210ff3c6f0657e4f914e71d | 095417d6b669c2dec39a5842ccb94df915f97f54, 2446d099350185caeed19ab2c0270451a97296fb, d119bd2e1643cc023210ff3c6f0657e4f914e71d |
| Linux/Linuxgeneric | 6.18 | Not reported |
Published upstream
May 27, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout When llbitmap_suspend_timeout() times out waiting for percpu_ref to become zero, it returns -ETIMEDOUT without resurrecting the percpu_ref. The caller (md_llbitmap_daemon_fn) then continues to the next page without calling llbitmap_resume(), leaving the percpu_ref in a killed state permanently. Fix this by resurrecting the percpu_ref before returning the error, ensuring the page control structure remains usable for subsequent operations.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-45955 records a Unknown severity vulnerability in md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5ab829f1971dc99f2aac10846c378e67fc875abc <095417d6b669c2dec39a5842ccb94df915f97f54 || >=5ab829f1971dc99f2aac10846c378e67fc875abc <2446d099350185caeed19ab2c0270451a97296fb || >=5ab829f1971dc99f2aac10846c378e67fc875abc <d119bd2e1643cc023210ff3c6f0657e4f914e71d | 095417d6b669c2dec39a5842ccb94df915f97f54, 2446d099350185caeed19ab2c0270451a97296fb, d119bd2e1643cc023210ff3c6f0657e4f914e71d |
| Linux/Linuxgeneric | 6.18 | Not reported |
Published upstream
May 27, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout When llbitmap_suspend_timeout() times out waiting for percpu_ref to become zero, it returns -ETIMEDOUT without resurrecting the percpu_ref. The caller (md_llbitmap_daemon_fn) then continues to the next page without calling llbitmap_resume(), leaving the percpu_ref in a killed state permanently. Fix this by resurrecting the percpu_ref before returning the error, ensuring the page control structure remains usable for subsequent operations.
Quoted source text, attributed separately from HOL analysis.