{"id":"CVE-2026-98152","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: fix queue leak when connect backlog is exceeded\n\nWhen pending disconnecting queues exceed the backlog limit, the\nconnect path only drops the device referenc…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: fix queue leak when connect backlog is exceeded\n\nWhen pending disconnecting queues exceed the backlog limit, the\nconnect path only drops the device referenc…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401","CWE-772"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.12.96, < 6.12.111","linux_kernel >= 6.18.39, < 6.18.53","linux_kernel >= 7.1.4, < 7.2.7","linux_kernel = 7.3"],"patched":["linux_kernel 7.2.7"],"published":"2026-09-25","updated":"2026-10-02","sourceUpdated":"2026-10-02T15:08:03.150","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-98152","references":[{"url":"https://git.kernel.org/stable/c/186414a6a1a34e081b07e8873622f90402346235","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/287420cde9d6669abcd2878c344db67423eb7df6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/32e598324edc3ebb1ac9362d5b9fc30ce0de4873","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4f7cf573cdf0ee857448b9b1967d686b07c71e7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/60d56bf0b14d3c545bacb9aeef92a7e6f2cf0caa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e48f9d1076f8c62c3969588d638602b94aaeff12","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fb1ed67788e21832b614c23767a088c08cfdd2f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98152.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98152"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541372"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98152"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98152"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98152.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00114,"epssPercentile":0.01483,"ingestedAt":"2026-09-25T11:06:38.805Z","slug":"CVE-2026-98152","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: fix queue leak when connect backlog is exceeded\n\nWhen pending disconnecting queues exceed the backlog limit, the\nconnect path only drops the device reference and leaks the newly\nallocated queue and its IB resources.\n\n## Affected\n\n- `linux_kernel >= 6.12.96, < 6.12.111`\n- `linux_kernel >= 6.18.39, < 6.18.53`\n- `linux_kernel >= 7.1.4, < 7.2.7`\n- `linux_kernel = 7.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 7.2.7`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-02 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98152.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":212571,"id":"CVE-2026-98152","ts":1790668213573,"field":"cvss","old":null,"new":"5.5"},{"seq":212570,"id":"CVE-2026-98152","ts":1790668213573,"field":"severity","old":"none","new":"medium"}]}