CVE-2026-89974

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the nvme-fc module of the Linux kernel. The problem occurs when the nvme add ctrl() function fails, which can happen under memory pressure or during fault injection when dev set name() cannot allocate. In this scenario, nvme fc init ctrl() jumps to an error path that bypasses the clearing of the ctrl->ctrl.opts pointer. Consequently, both nvme fc ctrl free() and nvmf create ctrl() attempt to free the fabrics options, leading to a slab-use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.