CVE-2026-74542netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Fix the handling of folio_queue allocation failure in writeback by adding a mempool and passing in gfp_t flags to the rolling buffer functions that allocate memory, using the mempool if gfp != GFP_KERNEL. This is then extended upwards and the gfp to be used for a request is stored in the netfs_io_request struct and is then used for both requests and subrequests, eliminating the sleeping loops there. The failure caused: folio != NULL WARNING: fs/netfs/write_issue.c:603 at netfs_writepages+0x883/0xa10 fs/netfs/write_issue.c:603, CPU#3: syz.0.17/5919
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from cd0277ed0c188dd40e7744e89299af7b78831ca4 before 15ed8a9b7c63e9171f5139a6aaa1ffb61809861f; from cd0277ed0c188dd40e7744e89299af7b78831ca4 before 3f6d7f8a5416d852648d15a05e895f1195ee8a85; from cd0277ed0c188dd40e7744e89299af7b78831ca4 before 1d78d56c43ef3768183e8370e7367b162700e049 | CNA record |
References
- https://git.kernel.org/stable/c/15ed8a9b7c63e9171f5139a6aaa1ffb61809861f
- https://git.kernel.org/stable/c/3f6d7f8a5416d852648d15a05e895f1195ee8a85
- https://git.kernel.org/stable/c/1d78d56c43ef3768183e8370e7367b162700e049
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.