CVE-2026-45953: Linux kernel · md/raid5: fix IO hang with degraded array with llbitmap
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in cd1635d844d26471c56c0a432abdee12fc9ad735 : update Linux kernel when convenient.
Data as of 6 Nov 2026, 16:20 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- CISA SSVC
- Exploitation
- No evidence of active exploitation and no public proof of concept
- Automatable
- Attackers cannot reliably automate steps 1–4 of the kill chain
- Technical impact
- Limited control over the software or limited information exposure
CISA SSVC assessment, 2026-11-06.
- Patch
- Available – fixed in cd1635d844d26471c56c0a432abdee12fc9ad735, 870b9f15867b0e70f3459ef3974b043e8b229690, 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8
Exploitation evidence
Disclosed: evidence found.
CVE published 27 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade Linux kernel to cd1635d844d26471c56c0a432abdee12fc9ad735, 870b9f15867b0e70f3459ef3974b043e8b229690 or 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
The vulnerability is fixed in the Linux kernel commits identified by hashes cd1635d844d26471c56c0a432abdee12fc9ad735, 870b9f15867b0e70f3459ef3974b043e8b229690, and 28ef299e7a5b81817f8ca8297c2ddff28f5da5e8. Users should update their Linux kernel to a version including these fixes to resolve the issue.
Description
A vulnerability in the Linux kernel's md/raid5 subsystem caused IO hangs when operating with a degraded RAID5 array using llbitmap. The issue arises from a missing check in the need_this_block() function, leading to a deadlock during stripe handling. This flaw was fixed in specific Linux kernel commits.