Skip to content
Heist/ feed
Back to feed
UnratedFix available

md/md-llbitmap: raise barrier before state machine transition

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling llbitmap_state_machine() in both llbitmap_start_write() and llbitmap_start_discard(). This ensures the barrier is in place before any state transitions occur, preventing potential race conditions where the state machine could complete before the barrier is properly raised.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.18.27, 7.0.4
CVEs
CVE-2026-46095
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 23:16 UTC · Revision 1

Source evidence

md/md-llbitmap: raise barrier before state machine transition

core-osv · Original source

Published 27 May 2026, 12:58 UTC

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling llbitmap_state_machine() in both llbitmap_start_write() and llbitmap_start_discard(). This ensures the barrier is in place before any state transitions occur, preventing potential race conditions where the state machine could complete before the barrier is properly raised.

osv:CVE-2026-46095

Kernel

Fixed versions: 6.18.27, 7.0.4

Complete source record
{
  "id": "970d57a6716df325a14c69d1f0bc79a3802be9d75ebf19f3881ae8ec9454b9ef",
  "url": "https://osv.dev/vulnerability/CVE-2026-46095",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "md/md-llbitmap: raise barrier before state machine transition",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling llbitmap_state_machine() in both llbitmap_start_write() and llbitmap_start_discard(). This ensures the barrier is in place before any state transitions occur, preventing potential race conditions where the state machine could complete before the barrier is properly raised.",
    "evidence": "osv:CVE-2026-46095",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.18.27",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.0.4",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-46095",
      "aliases": [
        "CVE-2026-46095"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5ab829f1971dc99f2aac10846c378e67fc875abc"
                },
                {
                  "fixed": "9142f00a9287ca38152717e3e88a033a27774e7f"
                },
                {
                  "fixed": "9701d51dd378380ba05293fa391e8ba01065ae8d"
                },
                {
                  "fixed": "ef4ca3d4bf09716cff9ba00eb0351deadc8417ab"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46095.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.18.0"
                },
                {
                  "fixed": "6.18.27"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.0.4"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46095.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:24.459470993Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/9142f00a9287ca38152717e3e88a033a27774e7f",
        "https://git.kernel.org/stable/c/9701d51dd378380ba05293fa391e8ba01065ae8d",
        "https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46095.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46095",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46095.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-46095",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 490806,
  "published_at": "2026-05-27T12:58:48.179+00:00"
}