CVE-2026-64321None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which acquires a reference on the returned nd…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
0.1% → 0.1%
In the Linux kernel, the following vulnerability has been resolved:
nvme: target: rdma: fix ndev refcount leak on queue connect
nvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which acquires a reference on the returned ndev via kref_get(). On the path where the host queue backlog is exceeded and the function returns NVME_SC_CONNECT_CTRL_BUSY, reference of ndev is not released, leaking the kref.
Fix this by adding a goto to the existing put_device label before the early return.
Linux >= 28877977bbc4f44dd3068b74ee781466c597a3b3 < 204b9645536bb4a77a2cb35e6519dbf9f4ea1665Linux >= bd3f40fdec552f9200e7b8521ef02b578c9ee8b0 < 00eaa58988d35fd47ca8811f7f72871591f61ffbLinux >= 85a79da286b65ae2238a22ac901a0039779e613e < 712f3268a62d0df98a7ee991cba963ced2e58007Linux >= 31deaeb11ba7a885116c9c30892b9f763c04d59c < d65fe42820b890a6a4644de0a95a812471f79ad3Linux >= 31deaeb11ba7a885116c9c30892b9f763c04d59c < a8803c4f0ac3fa7df5551bbb5a8800c434a94357Linux >= 31deaeb11ba7a885116c9c30892b9f763c04d59c < 5828517d17eda27f21d29ea14800c9e0a57bad11Linux >= 31deaeb11ba7a885116c9c30892b9f763c04d59c < badc53620fe813b3a9f727ef9526f98567c2c898Linux 6.8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets