CVE-2026-90206

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between the nvmet subsys attr qid max store() and nvmet alloc ctrl() functions when the max qid limit of a subsystem is modified. If a userspace process updates max qid while nvmet alloc ctrl() is allocating memory for submission queues (sqs), the new controller may be added to the system with memory allocated based on the old, smaller limit. Subsequently, when nvmet install queue() is executed, it may use the updated, larger max qid value, leading to a KASAN out-of-bounds access and potential memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.