What is CVE-2026-46095?

CVE-2026-46095 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 6.18 onward and patched in 6.18.27, 7.0.4 and 7.1. CVE-2026-46095 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-46095?

CVE-2026-46095 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2026-46095?

Yes, CVE-2026-46095 has been patched. Fixed versions include 6.18.27, 7.0.4 and 7.1. If you are running Linux kernel 6.18 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-46095 actively exploited?

CVE-2026-46095 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-46095

Medium

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling llbitmap_state_machine() in both llbitmap_start_write() and llbitmap_start_discard(). This ensures the barrier is in place before any state transitions occur, preventing potential race conditions where the state machine could complete before the barrier is properly raised.

Package Linux Kernel

Published 2026-05-27

Last modified 2026-06-25

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 6.18 and later are affected. Fixed in 6.18.27, 7.0.4, 7.1 and their respective stable series.

Affected from

≥ 6.18

Fixed in

✓ 6.18.27 6.18.x ✓ 7.0.4 7.0.x ✓ 7.1

References

3 total

Kernel Git
https://git.kernel.org/stable/c/9142f00a9287ca38152717e3e88a033a27774e7f

Patch
Kernel Git
https://git.kernel.org/stable/c/9701d51dd378380ba05293fa391e8ba01065ae8d

Patch
Kernel Git
https://git.kernel.org/stable/c/ef4ca3d4bf09716cff9ba00eb0351deadc8417ab

Patch

Details

CVE ID CVE-2026-46095

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2026-05-27

Modified 2026-06-25

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-46095?

CVE-2026-46095 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 6.18 onward and has been patched in 6.18.27, 7.0.4 and 7.1. CVE-2026-46095 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-46095?

CVE-2026-46095 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2026-46095?

Yes. CVE-2026-46095 has been patched. Fixed versions include 6.18.27, 7.0.4 and 7.1. If you are running Linux kernel 6.18 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-46095 actively exploited?

No. CVE-2026-46095 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.