CVE-2026-74373

Source
https://cve.org/CVERecord?id=CVE-2026-74373
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74373.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74373
Downstream
Published
2026-08-15T05:58:52Z
Modified
2026-08-18T03:30:53Z
Summary
md/raid1,raid10: fix bio accounting for split md cloned bios
Details

In the Linux kernel, the following vulnerability has been resolved:

md/raid1,raid10: fix bio accounting for split md cloned bios

Use md_cloned_bio() to control bio accounting instead of relying on r1bio_existed in raid1 or the io_accounting flag in raid10.

The previous logic does not reliably reflect whether a bio is an md cloned bio. When a failed bio is split and resubmitted via bio_submit_split_bioset() on the error path, this can lead to either double accounting for md cloned bios, or missing accounting for bios returned from bio_submit_split_bioset()

Fix this by using md_cloned_bio() to detect md cloned bios and skip accounting accordingly.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74373.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb2a9acefaf9ce5bbc1e70f407e34599233d0243
Fixed
bb8d7ea74206b419aa05d7773a15a923b668c9f0
Fixed
ba976e3501111d11c550848b3b7341a73035f582

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74373.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74373.json"