CVE-2026-89969

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the nvmet-tcp module. The nvmet tcp try recv pdu() function reads a Protocol Data Unit (PDU) header into a fixed 128-byte buffer and calculates the remaining payload length without verifying if the result exceeds the buffer size. A remote unauthenticated host can send a specially crafted ICReq PDU that causes the system to write data beyond the buffer boundaries, leading to the corruption of kernel memory adjacent to the receive buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.