CVE-2026-74374

A flaw was found in the Linux kernel's md/raid1 and md/raid10 modules. An issue in detecting the error path when using md_cloned_bio() can lead to incorrect memory allocation flags. This misallocation can result in a system deadlock under memory pressure, causing a denial of service.

Red Hat Product Security has rated this vulnerability as having a Low impact because triggering the condition requires an uncommon combination of I/O failures during bio splitting and severe system memory exhaustion. An unprivileged local user cannot directly induce this internal error recovery sequence, limiting practical exploitability in typical enterprise environments. Furthermore, systems that do not configure software-defined RAID1 or RAID10 storage volumes are completely unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.