CVE-2026-74376

CVE-2026-74376

Critical · published August 15, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: reset read_slot when reusing r10bio for discard

put_all_bios() always drops devs[i].bio, but it only drops

devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an

r10bio that was previously used for a read, read_slot can still be

non-negative, and discard cleanup can skip bio_put() on repl_bio.

Reset read_slot to -1 when preparing an r10bio for discard so the

replacement bio is always released correctly.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00502 · 42.1th percentile
Published
2026-08-15T10:22Z
References (7)
EPSS history
Timeline
  • 15 AUG 05:58Z
    md/raid10: reset read_slot when reusing r10bio for discard
    cvelistv5