CVE-2026-46095

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling llbitmap_state_machine() in both llbitmap_start_write() and llbitmap_start_discard(). This ensures the barrier is in place before any state transitions occur, preventing potential race conditions where the state machine could complete before the barrier is properly raised.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/9142f00a9287ca38152717e3e88a033a27774e7f	Patch
https://git.kernel.org/stable/c/9701d51dd378380ba05293fa391e8ba01065ae8d	Patch
https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

25 Jun 2026, 21:17

Type	Values Removed	Values Added
CPE		cpe:2.3:o:linux:linux_kernel::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
CWE		NVD-CWE-noinfo
References	~~() https://git.kernel.org/stable/c/9142f00a9287ca38152717e3e88a033a27774e7f -~~	() https://git.kernel.org/stable/c/9142f00a9287ca38152717e3e88a033a27774e7f - Patch
References	~~() https://git.kernel.org/stable/c/9701d51dd378380ba05293fa391e8ba01065ae8d -~~	() https://git.kernel.org/stable/c/9701d51dd378380ba05293fa391e8ba01065ae8d - Patch
References	~~() https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab -~~	() https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab - Patch
First Time		Linux linux Kernel Linux

27 May 2026, 14:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-27 14:17

Updated : 2026-06-25 21:17

NVD link : CVE-2026-46095

Mitre link : CVE-2026-46095

CVE.ORG link : CVE-2026-46095

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-46095", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5ab829f1971dc99f2aac10846c378e67fc875abc", "lessThan": "9142f00a9287ca38152717e3e88a033a27774e7f", "versionType": "git"}, {"status": "affected", "version": "5ab829f1971dc99f2aac10846c378e67fc875abc", "lessThan": "9701d51dd378380ba05293fa391e8ba01065ae8d", "versionType": "git"}, {"status": "affected", "version": "5ab829f1971dc99f2aac10846c378e67fc875abc", "lessThan": "ef4ca3d4bf09716cff9ba00eb0351deadc8417ab", "versionType": "git"}], "programFiles": ["drivers/md/md-llbitmap.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.18"}, {"status": "unaffected", "version": "0", "lessThan": "6.18", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.27", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.4", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/md/md-llbitmap.c"], "defaultStatus": "affected"}]}], "published": "2026-05-27T14:17:31.113", "references": [{"url": "https://git.kernel.org/stable/c/9142f00a9287ca38152717e3e88a033a27774e7f", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9701d51dd378380ba05293fa391e8ba01065ae8d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/md-llbitmap: raise barrier before state machine transition\n\nMove the barrier raise operation before calling llbitmap_state_machine()\nin both llbitmap_start_write() and llbitmap_start_discard(). This\nensures the barrier is in place before any state transitions occur,\npreventing potential race conditions where the state machine could\ncomplete before the barrier is properly raised."}], "lastModified": "2026-06-25T21:17:03.907", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A10DA86-4154-4102-9D63-807CF10A4352", "versionEndExcluding": "6.18.27", "versionStartIncluding": "6.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3", "versionEndExcluding": "7.0.4", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}