CVE-2026-98964

The Linux kernel contains a vulnerability in the nvmet component related to metadata allocation. In the function nvmet_req_alloc_p2pmem_sgls(), the req->p2p_dev is only assigned after both data and metadata SGL allocations succeed. However, if data allocation succeeds but metadata allocation f...

CVE-2026-64020: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dmavecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dmavec allocation was getting leaked on the completion...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Release the per-CPU pgmap reference when vminsertpage fails. When vminsertpage fails in p2pmemallocmmap, p2pmemallocmmap does not invoke percpurefput to free the per-CPU reference to pgmap acquired after...

CVE-2021-47130

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found but the p2p pool is empty, the nvme target is still trying to free the sgl from the p2p pool instead of the regular sgl pool and causing a crash BUG is called...