CVE-2026-74374

CVE-2026-74374

High · published August 15, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

md/raid1,raid10: fix error-path detection with md_cloned_bio()

Detect the error path using md_cloned_bio() instead of relying

on r1_bio in raid1 or r10_bio->read_slot in raid10, which may be

NULL or -1 after splitting and resubmitting a failed bio.

As a result, the error path may not be recognized and memory

allocations can incorrectly use GFP_NOIO instead of

(GFP_NOIO | __GFP_HIGH), which can lead to a deadlock under

memory pressure.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.6th percentile
Published
2026-08-15T10:22Z
References (5)
EPSS history
Timeline
  • 15 AUG 05:58Z
    md/raid1,raid10: fix error-path detection with md_cloned_bio()
    cvelistv5