CVE-2026-74376
Received Received - Intake

md/raid10 Discard Reuse Read Slot Reset Vulnerability

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio for discard put_all_bios() always drops devs[i].bio, but it only drops devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an r10bio that was previously used for a read, read_slot can still be non-negative, and discard cleanup can skip bio_put() on repl_bio. Reset read_slot to -1 when preparing an r10bio for discard so the replacement bio is always released correctly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74376
EUVD
EUVD-2026-59523

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the md/raid10 module. It involves improper handling of read_slot during discard operations. When a discard request reuses an r10bio previously used for read operations, the read_slot may still be non-negative. This can cause cleanup to skip releasing a replacement bio, leading to potential resource leaks or use-after-free issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's md/raid10 module and relates to improper handling of discard operations. Detection requires checking the kernel version and raid10 configuration. Use commands like 'uname -a' to check kernel version and 'cat /proc/mdstat' to inspect raid arrays. If using a vulnerable kernel version, the issue may be present.

Impact Analysis

If exploited, this could lead to system instability, crashes, or data corruption in systems using RAID10 configurations. It may allow local attackers to cause denial-of-service conditions or escalate privileges on affected systems.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Monitor vendor advisories for kernel updates. If immediate patching is not possible, avoid using discard operations on raid10 arrays until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74376. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart