CVE-2026-97409

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nvme-fc module where a controller in the CONNECTING state may experience an admin request timeout, triggering ctrl->ioerr work to abort inflight requests. This process calls the nvme fc abort outstanding ios() function, which attempts to abort requests in both admin and io tagsets. If the fc ctrl->tag set has not been initialized, it can lead to a system warning or instability because ctrl.queue count is initialized early in nvme fc alloc ctrl().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.