CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: reset readslot when reusing r10bio for discard
putallbios() always drops devs[i].bio, but it only drops devs[i].replbio when r10bio->readslot < 0. If discard reuses an r10bio that was previously used for a read, readslot can still be non-negative, and discard cleanup can skip bioput() on replbio.
Reset readslot to -1 when preparing an r10bio for discard so the replacement bio is always released correctly.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74376?
CVE-2026-74376 has a risk rating of 12, indicating a critical severity level.
What systems are affected by CVE-2026-74376?
CVE-2026-74376 affects the Linux kernel, specifically in the md/raid10 component.
How do I fix CVE-2026-74376?
To fix CVE-2026-74376, update your Linux kernel to the latest version where the vulnerability has been resolved.
What type of vulnerability is CVE-2026-74376?
CVE-2026-74376 is a vulnerability related to the handling of read slots in the md/raid10 subsystem of the Linux kernel.
Is CVE-2026-74376 publicly disclosed?
Yes, CVE-2026-74376 was publicly disclosed on August 15, 2026.