CVE-2026-64321
Received Received - Intake

NVMe RDMA Target Queue Connect Reference Leak

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which acquires a reference on the returned ndev via kref_get(). On the path where the host queue backlog is exceeded and the function returns NVME_SC_CONNECT_CTRL_BUSY, reference of ndev is not released, leaking the kref. Fix this by adding a goto to the existing put_device label before the early return.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64321
EUVD
EUVD-2026-49033

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a reference count leak vulnerability in the Linux kernel's NVMe over RDMA target implementation. When a host queue backlog is exceeded during connection, the function nvmet_rdma_queue_connect() fails to release a reference it acquired on a network device object (ndev), causing a kref leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's NVMe over RDMA target implementation. Detection requires checking kernel logs for failed NVMe RDMA queue connections or reference leaks in network device structures. Monitor logs for errors like NVME_SC_CONNECT_CTRL_BUSY during queue connects. Use dmesg or journalctl to review kernel messages for nvmet_rdma_queue_connect failures.

Impact Analysis

The vulnerability could lead to resource exhaustion on the affected system. Over time, the leaked references may accumulate and deplete available memory or other system resources, potentially causing performance degradation or system instability.

Mitigation Strategies

Apply the kernel patch that fixes the ndev reference leak in nvmet_rdma_queue_connect. Update to a patched kernel version where the goto label put_device is reached before early returns. If patching is not immediately possible, disable NVMe over RDMA target functionality as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64321. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart