CVE-2026-23112

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the NVMe-TCP component where the nvmet tcp build pdu iovec() function could walk past cmd->req.sg when a Protocol Data Unit (PDU) length or offset exceeds sg cnt. This allows the use of incorrect sg->length and sg->offset values, potentially leading to a General Protection Fault (GPF) or Kernel Address Sanitizer (KASAN) error during the execution of the copy to iter() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.