CVE-2026-74526

Source
https://cve.org/CVERecord?id=CVE-2026-74526
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74526.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74526
Downstream
Published
2026-08-15T12:27:42Z
Modified
2026-08-18T03:31:13Z
Summary
scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit

mpi3mr_fault_uevent_emit() runs from the fault watchdog and reset paths where host I/O may already be blocked. GFP_KERNEL allocations here, both the local kzalloc_obj() and the ones inside kobject_uevent_env() itself, can trigger reclaim that waits on that blocked I/O and deadlock.

Use memalloc_noio_save()/restore() to cover the whole call instead of just the local allocation.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74526.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ec54b348f274fdd2bd32bbe74de6d62ae1a10a18
Fixed
df817b19dac7034416d18f14347010b3e9f5cf3d
Fixed
ccff8c92571500fcfed21281e33daaf645bf692f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74526.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.0.0
Fixed
7.1.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74526.json"