{"id":"CVE-2026-74542","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix folio_queue ENOMEM in writeback by adding a mempool\n\nFix the handling of folio_queue allocation failure in writeback by adding a\nmempool and passing in gfp_t…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix folio_queue ENOMEM in writeback by adding a mempool\n\nFix the handling of folio_queue allocation failure in writeback by adding a\nmempool and passing in gfp_t…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= cd0277ed0c188dd40e7744e89299af7b78831ca4 < 15ed8a9b7c63e9171f5139a6aaa1ffb61809861f","Linux >= cd0277ed0c188dd40e7744e89299af7b78831ca4 < 3f6d7f8a5416d852648d15a05e895f1195ee8a85","Linux >= cd0277ed0c188dd40e7744e89299af7b78831ca4 < 1d78d56c43ef3768183e8370e7367b162700e049","Linux 6.12"],"published":"2026-08-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:17:47.160","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74542","references":[{"url":"https://git.kernel.org/stable/c/15ed8a9b7c63e9171f5139a6aaa1ffb61809861f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/1d78d56c43ef3768183e8370e7367b162700e049","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3f6d7f8a5416d852648d15a05e895f1195ee8a85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00198,"epssPercentile":0.08864,"ingestedAt":"2026-10-15T11:00:41.672Z","slug":"CVE-2026-74542","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix folio_queue ENOMEM in writeback by adding a mempool\n\nFix the handling of folio_queue allocation failure in writeback by adding a\nmempool and passing in gfp_t flags to the rolling buffer functions that\nallocate memory, using the mempool if gfp != GFP_KERNEL.\n\nThis is then extended upwards and the gfp to be used for a request is stored\nin the netfs_io_request struct and is then used for both requests and\nsubrequests, eliminating the sleeping loops there.\n\nThe failure caused:\n\n    folio != NULL\n    WARNING: fs/netfs/write_issue.c:603 at netfs_writepages+0x883/0xa10 fs/netfs/write_issue.c:603, CPU#3: syz.0.17/5919\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}