CVE-2026-74376
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio for discard put_all_bios() always drops devs[i].bio, but it only drops devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an r10bio that was previously used for a read, read_slot can still be non-negative, and discard cleanup can skip bio_put() on repl_bio. Reset read_slot to -1 when preparing an r10bio for discard so the replacement bio is always released correctly.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux3cb2a606ce4902eceabe68338df0653312f861f8, 561c9711e4f545d6464a023168bdee03b00fa945, ce3030e92f14362880055de5fe3c258971118853, 742e4afd247d9c972695227716b03d432a7e1d26, b7313f23ea5a79b199a007bfad64a866cc2c22e7, eb04e3e9c14ed15914f5fd2eae8b6435f54f095f, 6b8a26af065ddc93de2aa5c9f0df98dce9723442 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < 3cb2a606ce4902eceabe68338df0653312f861f8, d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < 561c9711e4f545d6464a023168bdee03b00fa945, d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < ce3030e92f14362880055de5fe3c258971118853, d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < 742e4afd247d9c972695227716b03d432a7e1d26, d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < b7313f23ea5a79b199a007bfad64a866cc2c22e7, d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < eb04e3e9c14ed15914f5fd2eae8b6435f54f095f, d30588b2731fb01e1616cf16c3fe79a1443e29aa ≤ v < 6b8a26af065ddc93de2aa5c9f0df98dce9723442, 5.13 | 3cb2a606ce4902eceabe68338df0653312f861f8, 561c9711e4f545d6464a023168bdee03b00fa945, ce3030e92f14362880055de5fe3c258971118853, 742e4afd247d9c972695227716b03d432a7e1d26, b7313f23ea5a79b199a007bfad64a866cc2c22e7, eb04e3e9c14ed15914f5fd2eae8b6435f54f095f, 6b8a26af065ddc93de2aa5c9f0df98dce9723442 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.