PT-2026-121936
CVE-2026-98964
·
Published
2026-10-23
·
Updated
2026-10-23
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
nvmet: use the local P2P device on metadata allocation failure
nvmet req alloc p2pmem sgls() assigns req->p2p dev only after the data
and metadata SGL allocations succeed. If the data allocation succeeds
but the metadata allocation fails, out free sg passes req->p2p dev to
pci p2pmem free sgl() before that assignment has taken place.
Pass the local p2p dev argument instead, so cleanup uses the same PCI
device as the successful data allocation.
Found an issue in the description? Have something to add? Feel free to write us 👾