CVE-2026-46304

A flaw was found in the Linux kernel's NVMe over TCP nvmet target subsystem. A recursive locking issue can occur when nvmettcpreleasequeuework attempts to flush ctrl-asynceventwork on the same workqueue nvmet-wq that is already processing a task. This can lead to a deadlock, causing a Denial of...

CVE-2022-50717

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmettcphandleh2cdatapdu, add a bounds check to avoid out-of-bounds access...

CVE-2025-38658 nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: Do not complete commands twice if nvmetreqinit fails Have nvmetreqinit and req-execute complete failed commands. Description of the problem: nvmetreqinit calls nvmetreqcomplete internally upon failure, e.g.,...