CVE-2026-74526

A flaw was found in the Linux kernel's mpi3mr SCSI driver. When the mpi3mr_fault_uevent_emit() function is called from fault watchdog or reset paths, memory allocation requests can trigger a reclaim process. This reclaim process may then wait on host I/O that is already blocked, leading to a system deadlock. This can result in a Denial of Service (DoS).

This vulnerability is rated with a Low severity impact because it requires specialized storage controller hardware and occurs only under specific fault recovery scenarios. The deadlock condition manifests only during error watchdog handling or controller resets while the system is concurrently experiencing high memory pressure. Furthermore, the affected driver is inactive unless matching Broadcom adapters are physically attached, limiting the potential attack surface across standard deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.