CVE-2026-72437

CVE-2026-72437

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry

When a read is retried, raid1_read_request() may be called with a

pre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT

read, the bio is completed and the function returns immediately. In this

case the existing r1_bio is leaked.

This fixes a leak of pre-allocated r1_bio structures for retried reads.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Published
2026-08-15T10:22Z
References (6)
https://git.kernel.org/stable/c/69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6d92dbd73d19a0622f60352ce9d9379f7a760112 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c66ed3e6371f5dba8f5d8ab810d6683ddc99201e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c6e6354295845698d2fdfa20b71fc404786f7e93 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d1eda529a4bf6b866d02755723ee0eb1f037a5ed · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/db58075bc9c2ad2731f9c063859b47104bc2e7ef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:56Z
    md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
    cvelistv5