PT-2025-49091

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description The Linux kernel contains a flaw within the nvme-fc subsystem. Specifically, the issue arises from improper handling of work queues during the deletion of an NVMe-FC controller association. The...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988704)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988704 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests...

PT-2025-49095

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc2+ 38 Description The Linux kernel had a flaw related to vfat filesystem handling when emulating an nvme device on qemu with specific block size settings. Specifically, when both logical block size and...

Vulnerabilities of the functions nvme_tcpFetchRequest(), nvme_tcpInitRequest(), nvme_tcpHandleR2T(), and nvme_tcpSubmitAsyncEvent() in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerabilities of the functions nvmetcpFetchRequest, nvmetcpInitRequest, nvmetcpHandleR2T, and nvmetcpSubmitAsyncEvent driver/nvme/host/tcp.c in the Linux kernel involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow an attacker to cause servi...

The vulnerability of the nvme-fc component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nvme-fc component of the Linux operating system’s kernel is related to the assignment of a null pointer in the function nvmefciogetuuid within the file drivers/nvme/host/fc.c. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-32739

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: don't access released socket during error recovery While the error recovery work is temporarily failing reconnect attempts, running the 'nvme list' command causes a kernel NULL pointer dereference by calling getsockname...

PT-2025-41087

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s nvme-tcp subsystem. Specifically, a NULL pointer dereference can occur when running the 'nvme list' command during error recovery. This happens becaus...

EUVD-2025-25544

Malicious code in bioql PyPI...

USN-7789-1: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

PT-2025-40249

Name of the Vulnerable Software and Affected Versions Storage Performance Development Kit SPDK version 25.05 Description The Storage Performance Development Kit SPDK version 25.05 contains a buffer overflow in the NVMe-oF target component, specifically within lib/nvmf. Recommendations At the...

USN-7765-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()

...

nvme-tcp: sanitize request list handling

...

Linux Distros Unpatched Vulnerability : CVE-2025-38397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in...

Linux Distros Unpatched Vulnerability : CVE-2023-0122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service D...

Linux Distros Unpatched Vulnerability : CVE-2025-38264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: sanitize request list handling Validate the request in nvmetcphandler2t to ensure it's not part of any list, otherwise a malicious R2T PDU might injec...

nvme-rdma: unquiesce admin_q before destroy it

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nvme-tcp unvalidated request lists, which could lead to a request processing loop...

Vulnerabilities of components such as drivers, NVMe, and host kernels of the Linux operating system, which allow attackers to cause service failures

The vulnerability of components such as drivers, NVMe, and host kernels in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `nvme_loop_create_ctrl()` function in the drivers/nvme/target/loop.c module of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the nvmeloopcreatectrl function in the drivers/nvme/target/loop.c module of the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability may allow an attacker to access protected information...