CVE-2026-64019

Technical details are not publicly available in the provided documents; monitor for updates.

PT-2026-61389

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bio leak occurs in the nvme module when an integrity mapping fails. This happens because the local bio is always NULL, causing the system to leak the bio instead of retrieving it...

CVE-2026-43449 nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvmedbbufset dev-onlinequeues is a count incremented in nvmeinitqueue. Thus, valid indices are 0 through dev-onlinequeues − 1. This patch fixes the loop condition to ensure the index stays with...

CVE-2026-31523

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe PCI driver. A local user can trigger a race condition during a system reset by changing the polled queue count. This vulnerability allows a high-priority task to attempt to poll a queue before the system's queue maps are...

The vulnerability of the `nvme_remove_admin_tag_set()` function in the drivers/nvme/host/core.c file of the NVME support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nvmeremoveadmintagset function in the drivers/nvme/host/core.c file of the Linux NVME driver module is related to improper exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/nvme/host/fc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/nvme/host/fc.c module of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-23244

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

CVE-2026-23174

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing device dma map requirements The initial state of dmaneedsunmap may be false, but change to true while mapping the data iterator. Enabling swiotlb is one such case that can change the result. The nvme...

UBUNTU-CVE-2026-23174

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing device dma map requirements The initial state of dmaneedsunmap may be false, but change to true while mapping the data iterator. Enabling swiotlb is one such case that can change the result. The nvme...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002935 advisory. In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. Tenable has extracted the preceding description block directly from...

UBUNTU-CVE-2025-68756

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

Linux Distros Unpatched Vulnerability : CVE-2025-68756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure...

ROS-20251201-03

A vulnerability in the Linux kernel NVMe driver is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the nvmetreqcomplete function in the drivers/nvme/target/tcp.c module of the NVMe...

Linux Distros Unpatched Vulnerability : CVE-2023-53530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Use rawsmpprocessorid instead of smpprocessorid The following call trace was observed: localhost kernel: nvme nvme0: NVME-FC0: controller connect...

EUVD-2021-34068

Malicious code in bioql PyPI...

EUVD-2023-58597

Malicious code in bioql PyPI...

EUVD-2023-58767

Malicious code in bioql PyPI...

EUVD-2023-58766

Malicious code in bioql PyPI...

The vulnerability of the `nvme_tcp_setup_ctrl()` function in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the nvmetcpsetupctrl function driver/nvme/host/tcp.c in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-4210

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code...