CVE-2026-80790

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An invalid free occurs in the LS IOD error path within the nvmet-fc module. The function nvmet fc alloc ls iodlist() advances the iod pointer during the initialization of the LS IOD array. If a response buffer DMA mapping or an rqstbuf allocation fails, the unwind loop decrements iod beyond the start of the array. Consequently, the subsequent kfree(iod) call attempts to free an address located before the allocated object. This issue was identified in the nvmet fc register targetport function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.