CVE-2026-74374
Received Received - Intake

Memory Deadlock in Linux Kernel RAID1/RAID10

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md_cloned_bio() Detect the error path using md_cloned_bio() instead of relying on r1_bio in raid1 or r10_bio->read_slot in raid10, which may be NULL or -1 after splitting and resubmitting a failed bio. As a result, the error path may not be recognized and memory allocations can incorrectly use GFP_NOIO instead of (GFP_NOIO | __GFP_HIGH), which can lead to a deadlock under memory pressure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74374
EUVD
EUVD-2026-59521

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's RAID1 and RAID10 implementations. It involves incorrect error-path detection in the md/raid1 and raid10 modules. The issue occurs when the system relies on r1_bio or r10_bio->read_slot, which may be NULL or -1 after splitting and resubmitting a failed bio. This can lead to unrecognized error paths and improper memory allocation, potentially causing a deadlock under memory pressure.

Detection Guidance

This vulnerability is specific to the Linux kernel's md/raid1 and raid10 components. Detection requires checking kernel logs for errors related to md_cloned_bio() or memory allocation issues in RAID configurations. Use commands like dmesg | grep raid1 or journalctl -k | grep raid10 to inspect kernel logs for relevant errors.

Impact Analysis

This vulnerability could cause system deadlocks under memory pressure conditions. If the error path is not detected correctly, the kernel may fail to handle memory allocation properly, leading to system hangs or crashes. This primarily affects systems using RAID1 or RAID10 configurations in the Linux kernel.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for RAID-related errors and ensure proper memory allocation handling in RAID configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74374. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart