CVE-2026-89973

🗓️ 16 Sep 2026 10:32:52Reported by LinuxType

nvme-tcp missing C2HData direction check in Linux kernel enables remote warning fatal on panic_on_warn.

Reporter	Title	Published	Views	Family All 20
CBLMariner	CVE-2026-89973 affecting package kernel for versions less than 6.6.157.1-1	1 Oct 202604:01	–	cbl_mariner
Circl	CVE-2026-89973	1 Oct 202618:00	–	circl
Cvelist	CVE-2026-89973 nvme-tcp: check the data direction of a C2HData PDU	16 Sep 202610:32	–	cvelist
Debian	[SECURITY] [DLA 4817-1] linux-6.12 security update	4 Oct 202611:36	–	debian
Debian	[SECURITY] [DSA 6528-1] linux security update	29 Sep 202609:49	–	debian
Debian CVE	CVE-2026-89973	16 Sep 202610:32	–	debiancve
Tenable Nessus	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	4 Oct 202600:00	–	nessus
Tenable Nessus	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	29 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-89973	16 Sep 202600:00	–	nessus
EUVD	EUVD-2026-80573	16 Sep 202610:32	–	euvd

Vulners

CNA

Node

linux linux_kernelRange5.0–5.10.270

linux linux_kernelRange5.11.0–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.110

linux linux_kernelRange6.13.0–6.18.51

linux linux_kernelRange6.19.0–7.2.5

linux linux_kernelRange7.3.0–7.3-rc2

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/nvme/host/tcp.c"
    ],
    "versions": [
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "df74950ba6008655d4a977d17df7faf4b6e52b74",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "980d990f3c0560d7dfbfbf14699651fdf02f26ee",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "5b115d932f6e769ac80783fb18edd21b0aed256e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "0673a2affe45ca76b60de31a83c67b1e60f81bde",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "80d56202fbdff8906be6954b2776e5c14a4026f2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "b4af7999a998787d5eb6facb5a333e04a4f1d2d9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "a0c389b8a495bda1eb719d2503853c924b7a8355",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3f2304f8c6d6ed97849057bd16fee99e434ca796",
        "lessThan": "f83af377c148f6ad94b41c0e8313f12adf45e1c1",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/nvme/host/tcp.c"
    ],
    "versions": [
      {
        "version": "5.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.110",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.51",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.5",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f83af377c148f6ad94b41c0e8313f12adf45e1c1
git	www.git.kernel.org/stable/c/0673a2affe45ca76b60de31a83c67b1e60f81bde
git	www.git.kernel.org/stable/c/b4af7999a998787d5eb6facb5a333e04a4f1d2d9
git	www.git.kernel.org/stable/c/a0c389b8a495bda1eb719d2503853c924b7a8355
git	www.git.kernel.org/stable/c/df74950ba6008655d4a977d17df7faf4b6e52b74
git	www.git.kernel.org/stable/c/980d990f3c0560d7dfbfbf14699651fdf02f26ee
git	www.git.kernel.org/stable/c/5b115d932f6e769ac80783fb18edd21b0aed256e
git	www.git.kernel.org/stable/c/80d56202fbdff8906be6954b2776e5c14a4026f2

16 Sep 2026 15:18Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.2

EPSS0.00633