CVE-2026-64321

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak occurs in the NVMe target RDMA component. The function nvmet rdma queue connect() invokes nvmet rdma find get device(), which uses kref get() to acquire a reference to the returned ndev. When the host queue backlog is exceeded and the function returns NVME SC CONNECT CTRL BUSY, the reference to ndev is not released, resulting in a kref leak. A kref is a kernel reference counting mechanism used to manage the lifetime of objects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.