CVE-2026-98964

The Linux kernel contains a vulnerability in the nvmet component related to metadata allocation. In the function nvmet_req_alloc_p2pmem_sgls(), the req->p2p_dev is only assigned after both data and metadata SGL allocations succeed. However, if data allocation succeeds but metadata allocation f...

EUVD-2026-108758

In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmetreqallocp2pmemsgls assigns req-p2pdev only after the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation fails...

kernel: zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...