Medium severity5.5NVD Advisory· Published Jul 25, 2026· Updated Sep 14, 2026
CVE-2026-64321
CVE-2026-64321
Description
In the Linux kernel, the following vulnerability has been resolved:
nvme: target: rdma: fix ndev refcount leak on queue connect
nvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which acquires a reference on the returned ndev via kref_get(). On the path where the host queue backlog is exceeded and the function returns NVME_SC_CONNECT_CTRL_BUSY, reference of ndev is not released, leaking the kref.
Fix this by adding a goto to the existing put_device label before the early return.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- osv-coords15 versionspkg:linux/kernelpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
>= 6.8.0, < 6.12.96+ 14 more
- (no CPE)range: >= 6.8.0, < 6.12.96
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 7.1.7-1.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
Patches
Vulnerability mechanics
References
7- git.kernel.org/stable/c/5828517d17eda27f21d29ea14800c9e0a57bad11nvdPatch
- git.kernel.org/stable/c/a8803c4f0ac3fa7df5551bbb5a8800c434a94357nvdPatch
- git.kernel.org/stable/c/badc53620fe813b3a9f727ef9526f98567c2c898nvdPatch
- git.kernel.org/stable/c/d65fe42820b890a6a4644de0a95a812471f79ad3nvdPatch
- git.kernel.org/stable/c/00eaa58988d35fd47ca8811f7f72871591f61ffbnvd
- git.kernel.org/stable/c/204b9645536bb4a77a2cb35e6519dbf9f4ea1665nvd
- git.kernel.org/stable/c/712f3268a62d0df98a7ee991cba963ced2e58007nvd
News mentions
0No linked articles in our index yet.