CVE-2026-80790

CVE-2026-80790 affects the Linux kernel NVMe target over Fibre Channel module (nvmet-fc ). The root cause is in nvmet_fc_alloc_ls_iodlist(): when an rqstbuf allocation or response buffer DMA mapping fails, the error-unwind loop decrements the iod pointer past the start of the array, causing kfree...

EUVD-2026-71433

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in LS IOD error path nvmetfcalloclsiodlist advances iod while initializing the LS IOD array. If an rqstbuf allocation or response buffer DMA mapping fails, the unwind loop decrements iod past the start ...