High 7.5Published Aug 15, 2026

CVE-2026-74374md/raid1,raid10: fix error-path detection with md_cloned_bio()

Updated under an hour ago (Oct 26, 2026, 8:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md_cloned_bio() Detect the error path using md_cloned_bio() instead of relying on r1_bio in raid1 or r10_bio->read_slot in raid10, which may be NULL or -1 after splitting and resubmitting a failed bio. As a result, the error path may not be recognized and memory allocations can incorrectly use GFP_NOIO instead of (GFP_NOIO | __GFP_HIGH), which can lead to a deadlock under memory pressure.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	689389a06ce79fdced85b5115717f71c71e623e0 builds before 80eaeae0e4b1ed2418fd2b9088238651fb51df69; 689389a06ce79fdced85b5115717f71c71e623e0 builds before 8719aa0f57955fd641f952d16e02fc6b4934c6e3; 689389a06ce79fdced85b5115717f71c71e623e0 builds before 029b363c9b690613141338436ac91366b1928af2; 689389a06ce79fdced85b5115717f71c71e623e0 builds before 20fb582c92fd64e5c8bd83c6176264b2794603b7; from 689389a06ce79fdced85b5115717f71c71e623e0 before 811545e0926d02a6a0b1a1258bb5544777c164d4	CNA record

References

References

https://git.kernel.org/stable/c/80eaeae0e4b1ed2418fd2b9088238651fb51df69
https://git.kernel.org/stable/c/8719aa0f57955fd641f952d16e02fc6b4934c6e3
https://git.kernel.org/stable/c/029b363c9b690613141338436ac91366b1928af2
https://git.kernel.org/stable/c/20fb582c92fd64e5c8bd83c6176264b2794603b7
https://git.kernel.org/stable/c/811545e0926d02a6a0b1a1258bb5544777c164d4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.