CVE-2026-72437

md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry

N/A
Published: August 15, 2026 at 05:56 AM UTC
Updated: August 17, 2026 at 06:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry When a read is retried, raid1_read_request() may be called with a pre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT read, the bio is completed and the function returns immediately. In this case the existing r1_bio is leaked. This fixes a leak of pre-allocated r1_bio structures for retried reads.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.17 ≤ v < 6.1.1785.17 ≤ v < 6.12.975.17 ≤ v < 6.18.405.17 ≤ v < 6.6.1455.17 ≤ v < 7.1.55.17 ≤ v < 7.25.175aa705039c4fca84575539bfa2b8a28454a3d2ca
Vendor states this is fixed in 69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12 (fixed)
Vendor states this is fixed in 6d92dbd73d19a0622f60352ce9d9379f7a760112 (fixed)
Vendor states this is fixed in c66ed3e6371f5dba8f5d8ab810d6683ddc99201e (fixed)
Vendor states this is fixed in c6e6354295845698d2fdfa20b71fc404786f7e93 (fixed)
Vendor states this is fixed in d1eda529a4bf6b866d02755723ee0eb1f037a5ed (fixed)
Vendor states this is fixed in db58075bc9c2ad2731f9c063859b47104bc2e7ef (fixed)
Vendor states this is fixed in 5.17 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card