CVE-2026-89975

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the nvme-fabrics component when CONFIG NVME HOST AUTH is enabled. The nvmf parse options() function uses match strdup() to duplicate dhchap secret and dhchap ctrl secret before validating their DHHC-1 representation. If validation fails, the parser returns an error before the temporary string is assigned to opts->dhchap secret or opts->dhchap ctrl secret. Consequently, nvmf free options() cannot release the unassigned string, leading to a memory leak for each rejected option. This can be triggered by writing malformed values to /dev/nvme-fabrics using the dhchap secret or dhchap ctrl secret variables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.