CVE-2026-74526: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix potential deadlock in mpi3mrfaultueventemit
mpi3mrfaultueventemit() runs from the fault watchdog and reset paths where host I/O may already be blocked. GFPKERNEL allocations here, both the local kzallocobj() and the ones inside kobjectueventenv() itself, can trigger reclaim that waits on that blocked I/O and deadlock.
Use memallocnoiosave()/restore() to cover the whole call instead of just the local allocation.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74526?
CVE-2026-74526 has a risk score of 27, indicating a significant vulnerability.
What type of vulnerability is CVE-2026-74526?
CVE-2026-74526 is related to a potential deadlock in the Linux kernel's mpi3mr_fault_uevent_emit function.
How do I fix CVE-2026-74526?
To fix CVE-2026-74526, update your Linux kernel to the latest version where this vulnerability has been addressed.
What components are affected by CVE-2026-74526?
CVE-2026-74526 affects the SCSI subsystem in the Linux kernel, specifically involving the mpi3mr driver.
When was CVE-2026-74526 published?
CVE-2026-74526 was published on August 15, 2026.