CVE-2026-45953

A flaw was found in the Linux kernel's RAID5 module. When a low-level bitmap (llbitmap) bit state is unwritten in a degraded array, a missing check during write operations can cause the system to enter an infinite loop. This can lead to an I/O hang, effectively resulting in a Denial of Service (DoS) for the affected system.

This vulnerability is rated as Low severity by Red Hat because triggering the infinite loop requires a rare operational state involving an active, degraded RAID5 array with low-level bitmaps under specific local write conditions. Exploitation is confined to local users with write access to the affected storage and cannot be executed remotely. Furthermore, enterprise Red Hat Enterprise Linux releases do not include the vulnerable code path by default, severely restricting exposure across typical production environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.