CVE-2026-90277

CVE-2026-90277 is a Use-After-Free (UAF) in the Linux kernel's md/md-llbitmap component. When llbitmap_create() fails during bitmap superblock read, the old cleanup path freed the llbitmap structure before clearing mddev->bitmap. Readers relying on bitmap_info.mutex (such as /proc/mdstat ) cou...

CVE-2026-90277 md/md-llbitmap: prevent create failure bitmap UAF

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: prevent create failure bitmap UAF llbitmapcreate publishes mddev-bitmap before reading the bitmap superblock. This is needed because llbitmapreadsb can initialize a new bitmap and flush it through helpers that use...

EUVD-2026-81870

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: prevent create failure bitmap UAF llbitmapcreate publishes mddev-bitmap before reading the bitmap superblock. This is needed because llbitmapreadsb can initialize a new bitmap and flush it through helpers that use...