Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-74376

md/raid10: reset read_slot when reusing r10bio for discard

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio for discard put_all_bios() always drops devs[i].bio, but it only drops devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an r10bio that was previously used for a read, read_slot can still be non-negative, and discard cleanup can skip bio_put() on repl_bio. Reset read_slot to -1 when preparing an r10bio for discard so the replacement bio is always released correctly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < 3cb2a606ce4902eceabe68338df0653312f861f8affected
  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < 561c9711e4f545d6464a023168bdee03b00fa945affected
  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < ce3030e92f14362880055de5fe3c258971118853affected
  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < 742e4afd247d9c972695227716b03d432a7e1d26affected
  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < b7313f23ea5a79b199a007bfad64a866cc2c22e7affected
  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < eb04e3e9c14ed15914f5fd2eae8b6435f54f095faffected
  • d30588b2731fb01e1616cf16c3fe79a1443e29aa to < 6b8a26af065ddc93de2aa5c9f0df98dce9723442affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References