CVE-2026-74385

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmettcpsetqueuesock The return value of nvmettcpsetqueuesock is currently ignored in nvmettcptlshandshakedone. If it fails e.g., due to the socket not being in TCPESTABLISHED state, the socket...

CVE-2026-74385

CVE-2026-74385 affects the Linux kernel’s nvmet-tcp component. The vulnerability arises because nvmet_tcp_set_queue_sock() return value is ignored in nvmet_tcp_tls_handshake_done(), so if the call fails (e.g., socket not TCP_ESTABLISHED), socket callbacks aren’t set and queues/sockets can leak. T...