CVE-2026-72437
kernel: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · August 20, 2026
Description
A flaw was found in the Linux kernel's md/raid1 component. When a read operation is retried with the REQ_NOWAIT flag set, and the wait_read_barrier() function fails, a pre-allocated r1_bio structure may not be properly freed. This resource leak can accumulate over time, potentially leading to a denial of service (DoS) due to memory exhaustion.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime