Description
In the Linux kernel, the following vulnerability has been resolved:

md/raid5: fix IO hang with degraded array with llbitmap

When llbitmap bit state is still unwritten, any new write should force
rcw, as bitmap_ops->blocks_synced() is checked in handle_stripe_dirtying().
However, later the same check is missing in need_this_block(), causing
stripe to deadloop during handling because handle_stripe() will decide
to go to handle_stripe_fill(), meanwhile need_this_block() always return
0 and nothing is handled.
Published: 2026-05-27
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel, a defect in the RAID5 subsystem causes an infinite loop when a write is performed on a degraded array that still relies on a logical bitmap (llbitmap). The bug arises because a check that should force a read‑back‑write on an unwritten bitmap location is omitted in the need_this_block() routine, even though it exists in handle_stripe_dirtying(). When a write reaches handle_stripe(), it decides to go to handle_stripe_fill(), but need_this_block() continuously returns 0, blocking the operation and leading to a deadloop. The result is an I/O stall that effectively hangs the array and denies all pending and future I/O operations.

Affected Systems

Systems running Linux kernel versions that have not incorporated the upstream commits identified by 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8, 870b9f15867b0e70f3459ef3974b043e8b229690, or cd1635d844d26471c56c0a432abdee12fc9ad735 are affected. The issue targets deployments that use RAID5 with the llbitmap feature, typically in enterprise storage or data‑center environments. Newer kernels that include these patches are not impacted.

Risk and Exploitability

The CVSS score has not been published and the EPSS score is unavailable, indicating no publicly available exploit data. The vulnerability is listed as not in the CISA KEV catalog. Exploitation requires the ability to issue writes to a degraded RAID5 array, which is normally a privilege of local users with write access. An attacker who can trigger such writes could cause prolonged I/O hangs, temporarily rendering the system unresponsive until a reboot or hardware reset.

Generated by OpenCVE AI on May 27, 2026 at 18:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that incorporates the upstream commits fixing the missing bitmap check.
  • Reboot the system after the kernel update to ensure the md driver loads with the updated logic.
  • If a kernel update is not immediately possible, restrict write access to the affected RAID5 array or remove the array from production use until the patch can be applied.

Generated by OpenCVE AI on May 27, 2026 at 18:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 27 May 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-674

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix IO hang with degraded array with llbitmap When llbitmap bit state is still unwritten, any new write should force rcw, as bitmap_ops->blocks_synced() is checked in handle_stripe_dirtying(). However, later the same check is missing in need_this_block(), causing stripe to deadloop during handling because handle_stripe() will decide to go to handle_stripe_fill(), meanwhile need_this_block() always return 0 and nothing is handled.
Title md/raid5: fix IO hang with degraded array with llbitmap
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:18:09.203Z

Reserved: 2026-05-13T15:03:33.088Z

Link: CVE-2026-45953

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:17:11.813

Modified: 2026-05-27T14:48:03.013

Link: CVE-2026-45953

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-27T20:15:15Z

Weaknesses