Answer in brief
CVE-2026-72437 records a Unknown severity vulnerability in md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72437 records a Unknown severity vulnerability in md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <d1eda529a4bf6b866d02755723ee0eb1f037a5ed || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <c66ed3e6371f5dba8f5d8ab810d6683ddc99201e || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <db58075bc9c2ad2731f9c063859b47104bc2e7ef || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <6d92dbd73d19a0622f60352ce9d9379f7a760112 || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <c6e6354295845698d2fdfa20b71fc404786f7e93 || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12 | d1eda529a4bf6b866d02755723ee0eb1f037a5ed, c66ed3e6371f5dba8f5d8ab810d6683ddc99201e, db58075bc9c2ad2731f9c063859b47104bc2e7ef, 6d92dbd73d19a0622f60352ce9d9379f7a760112, c6e6354295845698d2fdfa20b71fc404786f7e93, 69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12 |
| Linux/Linuxgeneric | 5.17 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry When a read is retried, raid1_read_request() may be called with a pre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT read, the bio is completed and the function returns immediately. In this case the existing r1_bio is leaked. This fixes a leak of pre-allocated r1_bio structures for retried reads.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <d1eda529a4bf6b866d02755723ee0eb1f037a5ed || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <c66ed3e6371f5dba8f5d8ab810d6683ddc99201e || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <db58075bc9c2ad2731f9c063859b47104bc2e7ef || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <6d92dbd73d19a0622f60352ce9d9379f7a760112 || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <c6e6354295845698d2fdfa20b71fc404786f7e93 || >=5aa705039c4fca84575539bfa2b8a28454a3d2ca <69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12 | d1eda529a4bf6b866d02755723ee0eb1f037a5ed, c66ed3e6371f5dba8f5d8ab810d6683ddc99201e, db58075bc9c2ad2731f9c063859b47104bc2e7ef, 6d92dbd73d19a0622f60352ce9d9379f7a760112, c6e6354295845698d2fdfa20b71fc404786f7e93, 69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12 |
| Linux/Linuxgeneric | 5.17 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry When a read is retried, raid1_read_request() may be called with a pre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT read, the bio is completed and the function returns immediately. In this case the existing r1_bio is leaked. This fixes a leak of pre-allocated r1_bio structures for retried reads.
Quoted source text, attributed separately from HOL analysis.