Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90412

nvmet: fix return status of RMI log page on allocation failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page_rmi() leaves 'status' holding NVME_SC_SUCCESS (set by the successful nvmet_req_find_ns() call) when the kzalloc() for the log buffer fails. It then jumps to the out label and completes the request with a success status, so the host is told the command succeeded while no data was transferred. Initialize 'status' to NVME_SC_INTERNAL, matching the smart log handler, so an allocation failure is reported as an internal error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5fd075cdaf3649000677d960fd9e45c08081b7e0 to < ffd56ada81f975a33f1df447f1bec9090a818e98affected
  • 5fd075cdaf3649000677d960fd9e45c08081b7e0 to < 9e136150ac55df4b7ea36e6110ffa39d08905f37affected
  • 5fd075cdaf3649000677d960fd9e45c08081b7e0 to < 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References