CVE-2026-80589

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

CVE-2026-80589 block: stop the timeout timer when releasing a never added disk

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

CVE-2026-80589 block: stop the timeout timer when releasing a never added disk

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

CVE-2026-80589

This Linux kernel vulnerability is a slab-use-after-free in the block layer triggered during NVMe device probe failure. When a disk's probe fails before add_disk(), disk_release() calls blk_mq_exit_queue() but fails to stop the q->timeout timer, leaving a dangling entry in the timer wheel afte...

PT-2026-82205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the block subsystem. The disk release function fails to stop the q-timeout timer when releasing a disk whose probe failed before add disk. This occu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098928 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst,...

AlmaLinux 8 : kernel (ALSA-2026:59821)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59821 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

Linux Distros Unpatched Vulnerability : CVE-2026-80589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098916 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104558)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104558 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvmenshead struct nvmenshead contains a flexible...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104534)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104534 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvmenshead struct nvmenshead contains a flexible...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098698 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvmetcphandler2t to ensure it's...

CVE-2026-80589: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098750 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing portstate and rport state nvmefcunregisterremote removes the remote...

The vulnerability of the fcloop_t2h_xmt_ls_rsp() function in the drivers/nvme/target/fcloop.c file of the NVME driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fcloopt2hxmtlsrsp function in the drivers/nvme/target/fcloop.c file of the NVME driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260825-73-0021

The vulnerability of the nvmeinitctrl function in the drivers/nvme/host/core.c file of the NVME driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvme: fixed the bounds check for fdpcidx in FDP. The bounds check for fdpcidx sets n = NUMFDPC + 1, but the comparison used “” instead of “=”. This incorrectly accepted fdpidx when it equals n i.e., NUMFDPC + 1...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevents shared tags across queues on Apple A11. On Apple A11, tags of pending commands must be unique across the admin queue and IO queues. Otherwise, the firmware will crash with a “duplicate tag error for tag N”,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Rejects short AUTHRECEIVE buffers. The nvmetexecuteauthreceive function relies on the AUTHRECEIVE allocation length. It only checks whether the length is non-zero and matches the transfer length. In the SUCCESS1 and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nvme-core: fixed the devpmqos memory leak Called devpmqoshidelatencytolerance in the error unwinding patch to avoid the kmemleak issue: blktests master kmemleak-clear; ./check nvme/044; blktests master kmemleak-scan ;...