CVE-2025-38209

CVE-2025-38209 is rooted in the Linux kernel nvme-tcp admin queue setup path. The patch sequence called nvme_tcp_configure_admin_queue() twice during nvme_tcp_setup_ctrl(): the first call (new=true) succeeds to prepare for DH-CHAP negotiation; the second call (new=false) is needed for secure conc...

PT-2025-27984 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the nvme-tcp module. The issue occurs when the second admin queue configuration fails, causing a tag set to not be...