SB2026092830 - Operation on a Resource after Expiration or Release in Linux kernel nvme host driver

Description

This security bulletin contains information about 1 vulnerability.

1) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2026-98154)

CWE-ID: CWE-672 - Operation on a Resource after Expiration or Release

CVSSv4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to compromise confidentiality, integrity, and availability.

The vulnerability exists due to improper cleanup of completed requests in the nvme_rdma_queue_rq function when handling an -EIO error in the NVMe RDMA queue request path. A local user can trigger an -EIO error during queue request processing to compromise confidentiality, integrity, and availability.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/171b993a4aed9889159df4815b6a6ba141e61975
• https://git.kernel.org/stable/c/a41e7fc8d244d9cfc6273051aed85b67adedbb89
• https://git.kernel.org/stable/c/cf3e706963ffbd3ee2568fa0d08ab016f0575ea8
• https://git.kernel.org/stable/c/d61828199c6cb4b76d48403c77023cd4bb9d09fc