CVE-2026-74374

Source
https://cve.org/CVERecord?id=CVE-2026-74374
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74374.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74374
Downstream
Published
2026-08-15T05:58:53.659Z
Modified
2026-08-16T03:48:54.977737257Z
Summary
md/raid1,raid10: fix error-path detection with md_cloned_bio()
Details

In the Linux kernel, the following vulnerability has been resolved:

md/raid1,raid10: fix error-path detection with mdclonedbio()

Detect the error path using mdclonedbio() instead of relying on r1bio in raid1 or r10bio->read_slot in raid10, which may be NULL or -1 after splitting and resubmitting a failed bio.

As a result, the error path may not be recognized and memory allocations can incorrectly use GFPNOIO instead of (GFPNOIO | _GFPHIGH), which can lead to a deadlock under memory pressure.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74374.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
689389a06ce79fdced85b5115717f71c71e623e0
Fixed
20fb582c92fd64e5c8bd83c6176264b2794603b7
Fixed
811545e0926d02a6a0b1a1258bb5544777c164d4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74374.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74374.json"