{"id":"CVE-2026-72437","summary":"md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry\n\nWhen a read is retried, raid1_read_request() may be called with a\npre-allocated r1_bio. If wait_read_barrier() fails for a REQ_NOWAIT\nread, the bio is completed and the function returns immediately. In this\ncase the existing r1_bio is leaked.\n\nThis fixes a leak of pre-allocated r1_bio structures for retried reads.","modified":"2026-08-18T03:30:56.554734394Z","published":"2026-08-15T05:56:50.732Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72437.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d92dbd73d19a0622f60352ce9d9379f7a760112"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c66ed3e6371f5dba8f5d8ab810d6683ddc99201e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c6e6354295845698d2fdfa20b71fc404786f7e93"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d1eda529a4bf6b866d02755723ee0eb1f037a5ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/db58075bc9c2ad2731f9c063859b47104bc2e7ef"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72437.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72437"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5aa705039c4fca84575539bfa2b8a28454a3d2ca"},{"fixed":"d1eda529a4bf6b866d02755723ee0eb1f037a5ed"},{"fixed":"c66ed3e6371f5dba8f5d8ab810d6683ddc99201e"},{"fixed":"db58075bc9c2ad2731f9c063859b47104bc2e7ef"},{"fixed":"6d92dbd73d19a0622f60352ce9d9379f7a760112"},{"fixed":"c6e6354295845698d2fdfa20b71fc404786f7e93"},{"fixed":"69ad6ce47f9bf2b9fe0ed69b042db993d33bbf12"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72437.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.17.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72437.json"}}],"schema_version":"1.9.0"}