What’s Vulnerable › Vulnerabilities

CVE-2026-74375: md/raid1,raid10: fix deadlock in read error recovery path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bio while handling a read error. In this case, resubmitting the bio can lead to a deadlock if the array is suspended before md_handle_request() acquires an active_io reference via percpu_ref_tryget_live(). Since the cloned bio already holds an active_io reference, trying to acquire another reference via percpu_ref_tryget_live() can lead to a deadlock while the array is suspended. Fix this by using percpu_ref_get() for md cloned bios.

Affected products

• Linux kernel: 6.6 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0889242775340e2c5b69b1590bd71335dd4fdeda
• https://git.kernel.org/stable/c/38777f014c37972868f1733a651c85288bb8a757
• https://git.kernel.org/stable/c/7b15c24f805339a585cfe7d72f446b7e88b9bcc0
• https://git.kernel.org/stable/c/923a6f3172a362d6b2ff12386e376e0e47188f78
• https://git.kernel.org/stable/c/ea2d1d2ebf60b70b602a92261a567d5fc4575eab

Get alerted when CVE-2026-74375 or the next vulnerability affects your stack