EUVD-2026-80572

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with listdelrcu&ns-siblings but does not wait for SRCU readers before freeing the namespace...

CVE-2026-89972 nvme: add missing SRCU grace period in error path

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with listdelrcu&ns-siblings but does not wait for SRCU readers before freeing the namespace...

EUVD-2026-80571

In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed nvmequeryzoneinfo returns either a negative errno or a positive NVMe status code, but nvmeupdatensinfoblock only tests for the negative case: ret =...

CVE-2026-89971

CVE-2026-89971 affects the Linux kernel NVMe subsystem . The root cause is an insufficient error check in nvme_update_ns_info_block(): it only handles negative errno returns from nvme_query_zone_info(), missing positive NVMe status codes. This causes setup to proceed with zero-initialized zone li...

CVE-2026-89971 nvme: skip the zoned limits update if the zone info query failed

In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed nvmequeryzoneinfo returns either a negative errno or a positive NVMe status code, but nvmeupdatensinfoblock only tests for the negative case: ret =...

EUVD-2026-80460

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abortwork once at submission qlanvmefcpabort and qlanvmelsabort ran INITWORK on priv-abortwork immediately before schedulework. INITWORK reinitializes the workstruct, resetting its list head and...

CVE-2026-89857 scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qlanvmelsrejectiocb allocates from and advances the request ring through qla2x00allociocbs which assumes the hardwarelock is held and qla2x00startiocbs which advances the...

Linux Distros Unpatched Vulnerability : CVE-2026-89971

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: skip the zoned limits update if the zone info query failed nvmequeryzoneinfo returns either a negative errno or a positive NVMe status code, but...

Linux Distros Unpatched Vulnerability : CVE-2026-89975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fabrics: fix DHCHAP secret leak on parse failure nvmfparseoptions duplicates dhchapsecret and dhchapctrlsecret with matchstrdup before validating the DHHC-...

Linux Distros Unpatched Vulnerability : CVE-2026-89857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qlanvmelsrejectiocb allocates from and advances the request ring through qla2x00allociocbs which...

CVE-2026-90008: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Limit NVMe request size to the PRP chain frame megasasmakeprpnvme builds a command's PRP list in cmd-sgframe, a DMA pool buffer of instance-maxchainframesz bytes, spending one entry per NVMe page of the transfe...

CVE-2026-89971: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed nvmequeryzoneinfo returns either a negative errno or a positive NVMe status code, but nvmeupdatensinfoblock only tests for the negative case: ret =...

PT-2026-93615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the nvme-fc module of the Linux kernel. The problem occurs when the nvme add ctrl function fails, which can happen under memory pressure or during fault...

PT-2026-93614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme tcp handle c2h data function where the system fails to verify if a command requested a data read when processing a C2HData PDU. A malicious controller can...

CVE-2026-89857: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qlanvmelsrejectiocb allocates from and advances the request ring through qla2x00allociocbs which assumes the hardwarelock is held and qla2x00startiocbs which advances the...

Linux Distros Unpatched Vulnerability : CVE-2026-89974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fc: fix double free of fabrics options when nvmeaddctrl fails nvmfcreatectrl owns the fabrics options and frees them whenever -createctrl returns an error,...

PT-2026-93616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvme-fabrics component when CONFIG NVME HOST AUTH is enabled. The nvmf parse options function uses match strdup to duplicate dhchap secret and dhchap ctrl...

CVE-2026-89842: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started qlanvmexmtlsrsp bails out to the out: label when firmware is not started !ha-flags.fwstarted, but the out: path unconditionally calls qlanvmelsrejectiocb, which ends in...

PT-2026-93483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla nvme xmt ls rsp function fails to properly check if the firmware has started before calling qla nvme ls reject iocb. This leads t...

CVE-2026-89973: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload, but it does not check that the command asked for data to be read. A controller that answer...