What’s Vulnerable › Vulnerabilities

CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry When a read is retried, raid1_read_request() may be called with a pre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT read, the bio is completed and the function returns immediately. In this case the existing r1_bio is leaked. This fixes a leak of pre-allocated r1_bio structures for retried reads.

Affected products

• Linux kernel: 5.17 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12
• https://git.kernel.org/stable/c/6d92dbd73d19a0622f60352ce9d9379f7a760112
• https://git.kernel.org/stable/c/c66ed3e6371f5dba8f5d8ab810d6683ddc99201e
• https://git.kernel.org/stable/c/c6e6354295845698d2fdfa20b71fc404786f7e93
• https://git.kernel.org/stable/c/d1eda529a4bf6b866d02755723ee0eb1f037a5ed
• https://git.kernel.org/stable/c/db58075bc9c2ad2731f9c063859b47104bc2e7ef

Get alerted when CVE-2026-72437 or the next vulnerability affects your stack