ROS-20260916-73-0006

The vulnerability of the nvmedbbufset function in the drivers/nvme/host/pci.c file of the NVME kernel driver in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvme: Avoid double-free of special payloads. If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double-free will occur. Clear the RQFSPECIALLOAD when the request is cleaned...

AZL-100226 CVE-2026-89483 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

CVE-2026-89483 nvme: zero the discard fallback page

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

CVE-2026-89483

CVE-2026-89483 is an information disclosure flaw in the Linux kernel NVMe subsystem . When nvme_setup_discard() falls back to the per-controller ctrl->discard_page (allocated via alloc_page(GFP_KERNEL) without zeroing) under memory pressure, up to 4080 bytes of uninitialized kernel memory (inc...

CVE-2026-89483

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

EUVD-2026-76389

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange NVMEDSMMAXRANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number of...

The vulnerability of the nvme_free_host_mem_multi() function in the driver/nvme/host/pci.c module of the Linux kernel’s NVME driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmefreehostmemmulti function in the nvme/host/pci.c driver module of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-80589 block: stop the timeout timer when releasing a never added disk

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

The vulnerability of the fcloop_t2h_xmt_ls_rsp() function in the drivers/nvme/target/fcloop.c file of the NVME driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fcloopt2hxmtlsrsp function in the drivers/nvme/target/fcloop.c file of the NVME driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A flaw was discovered in the Linux kernel’s NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packets when using NVMe over TCP. This can lead to the NVMe driver dereferencing a NULL pointer, resulting in kernel panic and a denial of service...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A flaw was discovered in the Linux kernel’s NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packets when using NVMe over TCP. This can lead to the NVMe driver dereferencing a NULL pointer, resulting in kernel panic and a denial of service...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrl nvmefcdeleteassociation waits for pending I/O to complete before returning. An error can cause -ioerrwork to be queued after cancelworksync has been called. Mov...

Linux Distros Unpatched Vulnerability : CVE-2026-74383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-pci: fix out-of-bounds access in nvmesetupdescriptorpools nvmesetupdescriptorpools indexes dev-descriptorpools using the numanode forwarded from...

Linux Distros Unpatched Vulnerability : CVE-2026-74361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used instead of =, incorrectly accepting fdpidx when it equals n i.e. NUMFD...

The vulnerability of the `nvme_alloc_admin_tag_set()` function in the `drivers/nvme/host/core.c` file of the NVME driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nvmeallocadmintagset function in the drivers/nvme/host/core.c file of the NVME driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function nvme_ctrl_dhchap_ctrl_secret_store() in the driver/nvme/host/core.c file of the Linux operating system’s NVME kernel driver, which allows a hacker to cause a service failure.

The vulnerability of the nvmectrldhchapctrlsecretstore function in the drivers/nvme/host/core.c file of the Linux NVME driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `nvme_dbbuf_set()` function in the driver/nvme/host/pci.c module of the Linux NVME driver allows a attacker to escalate their privileges or execute arbitrary code.

The vulnerability of the nvmedbbufset function in the drivers/nvme/host/pci.c file of the NVME kernel driver in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

CVE-2026-64071

A flaw was found in the Linux kernel's NVMe over PCI Express NVMe-PCIe driver. This vulnerability, a use-after-free error, occurs when the system attempts to free host memory twice in certain error handling scenarios, particularly during Host Memory Buffer HMB setup for NVMe devices. An attacker...

EUVD-2026-45593

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dmavecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dmavec allocation was getting leaked on the completion...