CVE-2026-64020
Received Received - Intake

NVMe PCIe DMA Vector Leak in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma_vec allocation was getting leaked on the completion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64020
EUVD
EUVD-2026-45593

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the nvme-pci driver when handling peer-to-peer (P2P) memory. The dma_vec allocation is not properly unmapped and freed during completion, leading to resource leakage.

Detection Guidance

This vulnerability is specific to the Linux kernel's NVMe PCI driver and involves a dma_vecs leak on P2P memory. Detection requires checking kernel logs for NVMe-related errors or memory leaks. Commands like dmesg | grep -i nvme or journalctl -k | grep -i nvme may help identify issues. Ensure your kernel version is up to date to confirm if the fix is applied.

Impact Analysis

This vulnerability could lead to system instability or performance degradation due to memory exhaustion. It may cause applications relying on NVMe devices to crash or behave unpredictably if the leaked memory accumulates over time.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a memory leak in the Linux kernel's NVMe PCI driver related to P2P memory management, which is a technical implementation issue rather than a data protection or privacy concern.

Mitigation Strategies

Update the Linux kernel to the latest stable version where this vulnerability is patched. Reboot the system after applying the update to ensure the new kernel is active. Monitor system logs for any NVMe-related errors post-update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64020. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart