CVE-2026-72437

md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry

When a read is retried, raid1_read_request() may be called with a pre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT read, the bio is completed and the function returns immediately. In this case the existing r1_bio is leaked.

This fixes a leak of pre-allocated r1_bio structures for retried reads.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5aa705039c4fca84575539bfa2b8a28454a3d2ca to before d1eda529a4bf6b866d02755723ee0eb1f037a5edAffected 5aa705039c4fca84575539bfa2b8a28454a3d2ca to before c66ed3e6371f5dba8f5d8ab810d6683ddc99201eAffected 5aa705039c4fca84575539bfa2b8a28454a3d2ca to before db58075bc9c2ad2731f9c063859b47104bc2e7efAffected 5aa705039c4fca84575539bfa2b8a28454a3d2ca to before 6d92dbd73d19a0622f60352ce9d9379f7a760112Affected 5aa705039c4fca84575539bfa2b8a28454a3d2ca to before c6e6354295845698d2fdfa20b71fc404786f7e93Affected 5aa705039c4fca84575539bfa2b8a28454a3d2ca to before 69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12Affected
LinuxLinux	5.17Affected before 5.17Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

5aa705039c4fca84575539bfa2b8a28454a3d2ca to before d1eda529a4bf6b866d02755723ee0eb1f037a5edAffected
5aa705039c4fca84575539bfa2b8a28454a3d2ca to before c66ed3e6371f5dba8f5d8ab810d6683ddc99201eAffected
5aa705039c4fca84575539bfa2b8a28454a3d2ca to before db58075bc9c2ad2731f9c063859b47104bc2e7efAffected
5aa705039c4fca84575539bfa2b8a28454a3d2ca to before 6d92dbd73d19a0622f60352ce9d9379f7a760112Affected
5aa705039c4fca84575539bfa2b8a28454a3d2ca to before c6e6354295845698d2fdfa20b71fc404786f7e93Affected
5aa705039c4fca84575539bfa2b8a28454a3d2ca to before 69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12Affected

LinuxLinux

5.17Affected
before 5.17Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.