What’s Vulnerable › Vulnerabilities

CVE-2026-74526: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit mpi3mr_fault_uevent_emit() runs from the fault watchdog and reset paths where host I/O may already be blocked. GFP_KERNEL allocations here, both the local kzalloc_obj() and the ones inside kobject_uevent_env() itself, can trigger reclaim that waits on that blocked I/O and deadlock. Use memalloc_noio_save()/restore() to cover the whole call instead of just the local allocation.

Affected products

• Linux kernel: 7.0 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/ccff8c92571500fcfed21281e33daaf645bf692f
• https://git.kernel.org/stable/c/df817b19dac7034416d18f14347010b3e9f5cf3d

Get alerted when CVE-2026-74526 or the next vulnerability affects your stack