---
id: CVE-2026-98152
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  nvmet-rdma: fix queue leak when connect backlog is exceeded

  When pending disconnecting queues exceed the backlog limit, the
  connect path only drops the device referenc…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  nvmet-rdma: fix queue leak when connect backlog is exceeded

  When pending disconnecting queues exceed the backlog limit, the
  connect path only drops the device referenc…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-401
  - CWE-772
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.12.96, < 6.12.111'
  - 'linux_kernel >= 6.18.39, < 6.18.53'
  - 'linux_kernel >= 7.1.4, < 7.2.7'
  - linux_kernel = 7.3
patched:
  - linux_kernel 7.2.7
published: '2026-09-25'
updated: '2026-10-02'
sourceUpdated: '2026-10-02T15:08:03.150'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98152'
references:
  - url: 'https://git.kernel.org/stable/c/186414a6a1a34e081b07e8873622f90402346235'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/287420cde9d6669abcd2878c344db67423eb7df6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/32e598324edc3ebb1ac9362d5b9fc30ce0de4873'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4f7cf573cdf0ee857448b9b1967d686b07c71e7d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/60d56bf0b14d3c545bacb9aeef92a7e6f2cf0caa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e48f9d1076f8c62c3969588d638602b94aaeff12'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fb1ed67788e21832b614c23767a088c08cfdd2f2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98152.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98152'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2541372'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98152'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98152'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98152.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.00114
epssPercentile: 0.01483
ingestedAt: '2026-09-25T11:06:38.805Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

nvmet-rdma: fix queue leak when connect backlog is exceeded

When pending disconnecting queues exceed the backlog limit, the
connect path only drops the device reference and leaks the newly
allocated queue and its IB resources.

## Affected

- `linux_kernel >= 6.12.96, < 6.12.111`
- `linux_kernel >= 6.18.39, < 6.18.53`
- `linux_kernel >= 7.1.4, < 7.2.7`
- `linux_kernel = 7.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.2.7`

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-02 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98152.json)