Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-98964EUVD-2026-108758GHSA-8VJR-8RG3-PVJV

nvmet: use the local P2P device on metadata allocation failure

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.273, 5.13, 6.6.160, 6.12.113, 6.18.57, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmet_req_alloc_p2pmem_sgls() assigns req->p2p_dev only after the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation fails, out_free_sg passes req->p2p_dev to pci_p2pmem_free_sgl() before that assignment has taken place. Pass the local p2p_dev argument instead, so cleanup uses the same PCI device as the successful data allocation.

Timeline

  1. CVE published
  2. First seen by cve.now
  3. Record last updated

Affected versions

  • Linux Linux

    From 5.10.43 · fixed in 5.10.273; From 5.12.10 · fixed in 5.13

  • Linux Linux

    5.13

  • KernelLinux

    From 5.13.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.113; From 6.13.0 · fixed in 6.18.57; From 6.19.0 · fixed in 7.2.11

References 8

git.kernel.org