CVE-2026-74526

CVE-2026-74526

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit

mpi3mr_fault_uevent_emit() runs from the fault watchdog and reset paths

where host I/O may already be blocked. GFP_KERNEL allocations here, both

the local kzalloc_obj() and the ones inside kobject_uevent_env() itself,

can trigger reclaim that waits on that blocked I/O and deadlock.

Use memalloc_noio_save()/restore() to cover the whole call instead of

just the local allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-08-15T17:17Z
References (2)
EPSS history
Timeline
  • 15 AUG 12:27Z
    scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit
    cvelistv5