43 matches found
CVE-2026-74386
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmettcpallocqueue, when a connection is closed during the allocation process e.g., nvmettcpsetqueuesock returns -ENOTCONN, the error handling jumps to outdestroysq and the...
CVE-2026-74386
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmettcpallocqueue, when a connection is closed during the allocation process e.g., nvmettcpsetqueuesock returns -ENOTCONN, the error handling jumps to outdestroysq and the...
UBUNTU-CVE-2026-74386
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmettcpallocqueue, when a connection is closed during the allocation process e.g., nvmettcpsetqueuesock returns -ENOTCONN, the error handling jumps to outdestroysq and the...
CVE-2026-74386 nvmet-tcp: fix page fragment cache leak in error path
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmettcpallocqueue, when a connection is closed during the allocation process e.g., nvmettcpsetqueuesock returns -ENOTCONN, the error handling jumps to outdestroysq and the...
CVE-2026-74386 nvmet-tcp: fix page fragment cache leak in error path
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmettcpallocqueue, when a connection is closed during the allocation process e.g., nvmettcpsetqueuesock returns -ENOTCONN, the error handling jumps to outdestroysq and the...
CVE-2026-74386
CVE-2026-74386 affects the Linux kernel nvmet-tcp component. The root cause is a page fragment cache leak in the error path of nvmet_tcp_alloc_queue(): if a connection closes during allocation (e.g., nvmet_tcp_set_queue_sock() returns -ENOTCONN), error handling jumps to out_destroy_sq and then ou...
PT-2026-72822
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix page fragment cache leak in error path In nvmet tcp alloc queue, when a connection is closed during the allocation process e.g., nvmet tcp set queue sock returns -ENOTCONN, the error handling jumps to out destroy s...
SUSE CVE-2026-63872
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-63912
A flaw was found in the Linux kernel's Encapsulating Security Payload ESP component. This vulnerability occurs in the ESP out-of-place fast path when handling combined single-fragment lengths. An attacker could potentially trigger a scenario where the system rejects the page-fragment fast path,...
SUSE CVE-2026-63912
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trailer in espoutputhead before espoutputtail allocates the destination page frag. The head-side gate currently checks skb-datalen and...
CVE-2026-63872
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-63912
The CVE concerns the Linux kernel XFRM/ESP path. The vulnerability arises in the ESP out-of-place fast path where an out-of-line trailer is written before dest page frag allocation; the head gate and tail code previously treated skb->data_len and tailen separately, risking an overflow when the...
CVE-2026-63912 xfrm: esp: restore combined single-frag length gate
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trailer in espoutputhead before espoutputtail allocates the destination page frag. The head-side gate currently checks skb-datalen and...
CVE-2026-63912
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trailer in espoutputhead before espoutputtail allocates the destination page frag. The head-side gate currently checks skb-datalen and...
CVE-2026-63872
Removed by vendor...
CVE-2026-63872 esp: fix page frag reference leak on skb_to_sgvec failure
In the Linux kernel, the following vulnerability has been resolved: esp: fix page frag reference leak on skbtosgvec failure In espoutputtail, when esp-inplace is false, the old skb page frags are replaced with a new page from the xfrm pagefrag cache. The source scatterlist sg is built from the ol...
CVE-2026-63872
CVE-2026-63872 entry rejected/not used per initial description.
PT-2026-61229
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm ESP out-of-place fast path where the esp output head function appends the trailer before esp output tail allocates the destination page frag. The head-side ga...
PT-2026-61189
In the Linux kernel, the following vulnerability has been resolved: esp: fix page frag reference leak on skb to sgvec failure In esp output tail, when esp-inplace is false, the old skb page frags are replaced with a new page from the xfrm page frag cache. The source scatterlist sg is built from t...