GHSA-rhg9-f586-q28wMediumCVSS 5.5
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: sanitize request list handling
Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of any list, otherwise a malicious R2T PDU might inject a loop in request list processing.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2025-38264
- https://git.kernel.org/stable/c/0bf04c874fcb1ae46a863034296e4b33d8fbd66c
- https://git.kernel.org/stable/c/78a4adcd3fedb0728436e8094848ebf4c6bae006
- https://git.kernel.org/stable/c/f054ea62598197714a6ca7b3b387a027308f8b13
- https://git.kernel.org/stable/c/8f27d152b2a59f443091cf9e3d815f06e32e9b96
- https://github.com/advisories/GHSA-rhg9-f586-q28w