CVE-2026-74374
In the Linux kernel, the following vulnerability has been resolved:
md/raid1,raid10: fix error-path detection with md_cloned_bio()
Detect the error path using md_cloned_bio() instead of relying
on r1_bio in raid1 or r10_bio->read_slot in raid10, which may be
NULL or -1 after splitting and resubmitting a failed bio.
As a result, the error path may not be recognized and memory
allocations can incorrectly use GFP_NOIO instead of
(GFP_NOIO | __GFP_HIGH), which can lead to a deadlock under
memory pressure.
CSIRTS triage
- What
- The md/raid1 and md/raid10 drivers misdetect errors in clone bio error paths, causing incorrect recovery behavior.
- Who is affected
- Systems using Linux software RAID 1 or RAID 10 arrays, especially those with recovery or resync operations.
- Urgency
- Medium severity (CVSS 4.1); no known exploitation but error detection faults degrade array reliability.
- Action
- Apply kernel patch that corrects error-path detection using md_cloned_bio in RAID1/10 drivers.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-74374
Get an email if CVE-2026-74374 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.
Advisory coverage (2)
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-74374)