CVE-2026-74372

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the raid1 module where a reference leak occurs in the REQ ATOMIC bad-block error path. Within the raid1 write request() function, the rdev->nr pending variable is incremented during each per-mirror loop iteration. If a REQ ATOMIC write operation encounters a bad block, the system jumps to the err handle section without decrementing the reference for the current mirror. Because the cleanup loop in err handle only processes indices less than the current iteration, the current slot is skipped, causing nr pending to leak permanently. This prevents the removal of the rdev because the raid1 remove conf() function will not remove a device that has a nr pending value greater than zero.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.