---
id: CVE-2026-74542
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfs: Fix folio_queue ENOMEM in writeback by adding a mempool

  Fix the handling of folio_queue allocation failure in writeback by adding a
  mempool and passing in gfp_t…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfs: Fix folio_queue ENOMEM in writeback by adding a mempool

  Fix the handling of folio_queue allocation failure in writeback by adding a
  mempool and passing in gfp_t…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= cd0277ed0c188dd40e7744e89299af7b78831ca4 <
    15ed8a9b7c63e9171f5139a6aaa1ffb61809861f
  - >-
    Linux >= cd0277ed0c188dd40e7744e89299af7b78831ca4 <
    3f6d7f8a5416d852648d15a05e895f1195ee8a85
  - >-
    Linux >= cd0277ed0c188dd40e7744e89299af7b78831ca4 <
    1d78d56c43ef3768183e8370e7367b162700e049
  - Linux 6.12
published: '2026-08-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:47.160'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74542'
references:
  - url: 'https://git.kernel.org/stable/c/15ed8a9b7c63e9171f5139a6aaa1ffb61809861f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/1d78d56c43ef3768183e8370e7367b162700e049'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3f6d7f8a5416d852648d15a05e895f1195ee8a85'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.08864
ingestedAt: '2026-10-15T11:00:41.672Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix folio_queue ENOMEM in writeback by adding a mempool

Fix the handling of folio_queue allocation failure in writeback by adding a
mempool and passing in gfp_t flags to the rolling buffer functions that
allocate memory, using the mempool if gfp != GFP_KERNEL.

This is then extended upwards and the gfp to be used for a request is stored
in the netfs_io_request struct and is then used for both requests and
subrequests, eliminating the sleeping loops there.

The failure caused:

    folio != NULL
    WARNING: fs/netfs/write_issue.c:603 at netfs_writepages+0x883/0xa10 fs/netfs/write_issue.c:603, CPU#3: syz.0.17/5919

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.