---
id: CVE-2026-74375
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  md/raid1,raid10: fix deadlock in read error recovery path

  raid1d and raid10d may resubmit a split md cloned bio while handling
  a read error
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  md/raid1,raid10: fix deadlock in read error recovery path

  raid1d and raid10d may resubmit a split md cloned bio while handling
  a read error. In this case, resubmitting…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bb2a9acefaf9ce5bbc1e70f407e34599233d0243 <
    ea2d1d2ebf60b70b602a92261a567d5fc4575eab
  - >-
    Linux >= bb2a9acefaf9ce5bbc1e70f407e34599233d0243 <
    38777f014c37972868f1733a651c85288bb8a757
  - >-
    Linux >= bb2a9acefaf9ce5bbc1e70f407e34599233d0243 <
    7b15c24f805339a585cfe7d72f446b7e88b9bcc0
  - Linux 6.6
published: '2026-08-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:46.173'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74375'
references:
  - url: 'https://git.kernel.org/stable/c/38777f014c37972868f1733a651c85288bb8a757'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7b15c24f805339a585cfe7d72f446b7e88b9bcc0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ea2d1d2ebf60b70b602a92261a567d5fc4575eab'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.08896
ingestedAt: '2026-10-15T11:00:41.677Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

md/raid1,raid10: fix deadlock in read error recovery path

raid1d and raid10d may resubmit a split md cloned bio while handling
a read error. In this case, resubmitting the bio can lead to a deadlock
if the array is suspended before md_handle_request() acquires an
active_io reference via percpu_ref_tryget_live().

Since the cloned bio already holds an active_io reference,
trying to acquire another reference via percpu_ref_tryget_live()
can lead to a deadlock while the array is suspended.

Fix this by using percpu_ref_get() for md cloned bios.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.