CVE-2026-23360
nvme: fix admin queue leak on controller reset
MEDIUM 5.5
At a glance
- Source
- NVD
- EPSS
- EPSS 0.13 % · percentile 2 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queue. This fixes a regression introduced by commit 03b3bcd319b3 ("nvme: fix admin request_queue lifetime").
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
- https://git.kernel.org/stable/c/089a6f17881a82c6c6e05f8564a867be0767eade
- https://git.kernel.org/stable/c/6e28bab900e40e4d610b04f9f82e01983d8fb356
- https://git.kernel.org/stable/c/2efbc838a26d3da72d8fe05770bdf869d4ca3ac5
- https://git.kernel.org/stable/c/64f87b96de0e645a4c066c7cffd753f334446db6
- https://git.kernel.org/stable/c/e159eb852aeee95443a9458ecb7d072bbb689913
- https://git.kernel.org/stable/c/8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f
- https://git.kernel.org/stable/c/b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2026-15339
- GCVE · GCVE-0-2026-23360
CERT-FR advisories
- CERTFR-2026-AVI-1066 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0926 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0697 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0548 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0519 — Multiples vulnérabilités dans Microsoft Azure Linux · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.120 < 6.6.131cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.12.62 < 6.12.77cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.17.12 < 6.18cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.18.1 < 6.18.17cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.7cpe:2.3:o:linux:linux_kernel:6.1.167:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.18:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ff037b5f47eeccc1636c03f84cd47db094eb73c9 < 089a6f17881a82c6c6e05f8564a867be0767eade ; affected 4896491c497226022626c3acc46044fd182f943c < 6e28bab900e40e4d610b04f9f82e01983d8fb356 ; affected a505f0ba36ab24176c300d7ff56aff85c2977e6c < 2efbc838a26d3da72d8fe05770bdf869d4ca3ac5 ; affected e8061d02b49c5c901980f58d91e96580e9a14acf < 64f87b96de0e645a4c066c7cffd753f334446db6 ; affected 03b3bcd319b3ab5182bc9aaa0421351572c78ac0 < e159eb852aeee95443a9458ecb7d072bbb689913 ; affected 03b3bcd319b3ab5182bc9aaa0421351572c78ac0 < 8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f |
| Linux · Linux | affected 6.18 ; unaffected 0 < 6.18 ; unaffected 6.1.168 ≤ 6.1.* ; unaffected 6.6.131 ≤ 6.6.* ; unaffected 6.12.77 ≤ 6.12.* ; unaffected 6.18.17 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |