https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:23:30 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23261 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nvme-fc: release admin tagset if init fails</p> <p>nvme_fabrics creates an NVMe/FC controller in following path:</p> <p>nvmf_dev_write() -&gt; nvmf_create_ctrl() -&gt; nvme_fc_create_ctrl() -&gt; nvme_fc_init_ctrl()</p> <p>nvme_fc_init_ctrl() allocates the admin blk-mq resources right after nvme_add_ctrl() succeeds. If any of the subsequent steps fail (changing the controller state, scheduling connect work, etc.), we jump to the fail_ctrl path, which tears down the controller references but never frees the admin queue/tag set. The leaked blk-mq allocations match the kmemleak report seen during blktests nvme/fc.</p> <p>Check ctrl-&gt;ctrl.admin_tagset in the fail_ctrl path and call nvme_remove_admin_tag_set() when it is set so that all admin queue allocations are reclaimed whenever controller setup aborts.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nvme-fc: release admin tagset if init fails</p> <p>nvme_fabrics creates an NVMe/FC controller in following path:</p> <p>nvmf_dev_write() -&gt; nvmf_create_ctrl() -&gt; nvme_fc_create_ctrl() -&gt; nvme_fc_init_ctrl()</p> <p>nvme_fc_init_ctrl() allocates the admin blk-mq resources right after nvme_add_ctrl() succeeds. If any of the subsequent steps fail (changing the controller state, scheduling connect work, etc.), we jump to the fail_ctrl path, which tears down the controller references but never frees the admin queue/tag set. The leaked blk-mq allocations match the kmemleak report seen during blktests nvme/fc.</p> <p>Check ctrl-&gt;ctrl.admin_tagset in the fail_ctrl path and call nvme_remove_admin_tag_set() when it is set so that all admin queue allocations are reclaimed whenever controller setup aborts.</p> https://vulnerability.circl.lu/vuln/cve-2026-23261