Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64321

nvme: target: rdma: fix ndev refcount leak on queue connect

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which acquires a reference on the returned ndev via kref_get(). On the path where the host queue backlog is exceeded and the function returns NVME_SC_CONNECT_CTRL_BUSY, reference of ndev is not released, leaking the kref. Fix this by adding a goto to the existing put_device label before the early return.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 28877977bbc4f44dd3068b74ee781466c597a3b3 to < 204b9645536bb4a77a2cb35e6519dbf9f4ea1665affected
  • bd3f40fdec552f9200e7b8521ef02b578c9ee8b0 to < 00eaa58988d35fd47ca8811f7f72871591f61ffbaffected
  • 85a79da286b65ae2238a22ac901a0039779e613e to < 712f3268a62d0df98a7ee991cba963ced2e58007affected
  • 31deaeb11ba7a885116c9c30892b9f763c04d59c to < d65fe42820b890a6a4644de0a95a812471f79ad3affected
  • 31deaeb11ba7a885116c9c30892b9f763c04d59c to < a8803c4f0ac3fa7df5551bbb5a8800c434a94357affected
  • 31deaeb11ba7a885116c9c30892b9f763c04d59c to < 5828517d17eda27f21d29ea14800c9e0a57bad11affected
  • 31deaeb11ba7a885116c9c30892b9f763c04d59c to < badc53620fe813b3a9f727ef9526f98567c2c898affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References