ROS-20260918-73-0113

The vulnerability of the nvmettcpbuildpduiovec function in the drivers/nvme/target/tcp.c file of the NVME kernel driver for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromi...

CVE-2026-23244 nvme: fix memory allocation in nvme_pr_read_keys()

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...

Vulnerability of the nvme_alloc_admintags() function in the drivers/nvme/host/pci.c module – The NVME kernel support driver in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the nvmeallocadmintags function in the drivers/nvme/host/pci.c module – The Linux operating system’s NVME kernel support driver is vulnerable due to a pointer dereferencing issue involving NULL pointers. Exploiting this vulnerability could allow an attacker to cause a service...

kernel: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags

A flaw was found in the nvme module in the Linux kernel. A NULL pointer dereference can be triggered due to improper error management when the blkmqinitqueue function fails to set up the queue, resulting in a denial of service...