CVE-2026-89482

🗓️ 11 Sep 2026 19:43:37Reported by LinuxType

Wild memory access in nvme-tcp C2HData handler copying into stale iterator from WRITE_ZEROES.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2026-89482 nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone	11 Sep 202619:43	–	cvelist
Debian CVE	CVE-2026-89482	11 Sep 202619:43	–	debiancve
EUVD	EUVD-2026-76388	11 Sep 202619:43	–	euvd
NVD	CVE-2026-89482	11 Sep 202620:19	–	nvd
OSV	DEBIAN-CVE-2026-89482	11 Sep 202620:19	–	osv
Positive Technologies	PT-2026-90198	11 Sep 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-89482	11 Sep 202621:16	–	redhatcve

Vulners

CNA

Node

linux linux_kernelRange5.4.36–5.5

linux linux_kernelRange5.6.8–5.7

linux linux_kernelRange5.7–6.12.109

linux linux_kernelRange6.13.0–6.18.50

linux linux_kernelRange6.19.0–7.2.4

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/nvme/host/tcp.c"
    ],
    "versions": [
      {
        "version": "25e5cb780e62bde432b401f312bb847edc78b432",
        "lessThan": "b36161701cb366f416afdcf70771d432a7c74753",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "25e5cb780e62bde432b401f312bb847edc78b432",
        "lessThan": "6a01b58263108eaf9869bb6f82f07709240c6589",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "25e5cb780e62bde432b401f312bb847edc78b432",
        "lessThan": "641ad3a30ba560f0a9a610376c568d7b75d2a2aa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "25e5cb780e62bde432b401f312bb847edc78b432",
        "lessThan": "3a4aa9e6ad3e35f8e24d5eaf38ee4d437075fb36",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f507ae6e33cbe56c4e3fe000434fc0ecc263d098",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b1458c16f4e26e87492e58e4d24a1873bd09232a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.4.36",
        "lessThan": "5.5",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.6.8",
        "lessThan": "5.7",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/nvme/host/tcp.c"
    ],
    "versions": [
      {
        "version": "5.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.7",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.109",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.50",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.4",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/6a01b58263108eaf9869bb6f82f07709240c6589
git	www.git.kernel.org/stable/c/641ad3a30ba560f0a9a610376c568d7b75d2a2aa
git	www.git.kernel.org/stable/c/b36161701cb366f416afdcf70771d432a7c74753
git	www.git.kernel.org/stable/c/3a4aa9e6ad3e35f8e24d5eaf38ee4d437075fb36

11 Sep 2026 20:19Current

EPSS0.002