CVE-2026-74385

Received Received - Intake

Memory Leak in Linux Kernel NVMe-TCP

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock The return value of nvmet_tcp_set_queue_sock() is currently ignored in nvmet_tcp_tls_handshake_done(). If it fails (e.g., due to the socket not being in TCP_ESTABLISHED state), the socket callbacks will not be properly set, leading to queue and socket leakage. Fix this by capturing the return value and calling nvmet_tcp_schedule_release_queue() on failure to ensure proper cleanup.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74385

EUVD

EUVD-2026-59532

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's nvmet-tcp module. It occurs when the return value of nvmet_tcp_set_queue_sock() is ignored during a TLS handshake. If the function fails, socket callbacks are not set properly, causing queue and socket leaks.

Detection Guidance

This vulnerability affects the Linux kernel's nvmet-tcp module and may lead to socket and queue leakage if nvmet_tcp_set_queue_sock() fails. Detection requires checking kernel logs for errors related to nvmet-tcp or socket state issues. Commands like dmesg | grep nvmet or journalctl -k | grep nvmet may help identify related errors. Ensure your kernel is updated to a patched version.

Impact Analysis

This could lead to resource exhaustion on affected systems due to leaked queues and sockets. It may cause performance degradation or system instability if exploited repeatedly.

Compliance Impact

This vulnerability involves socket and queue leakage in the Linux kernel's nvmet-tcp due to improper error handling. It does not directly impact data confidentiality, integrity, or availability in a way that would violate GDPR or HIPAA requirements. However, if exploited, it could lead to resource exhaustion or denial-of-service conditions, indirectly affecting system reliability and potentially causing compliance issues related to service availability under these standards.

Mitigation Strategies

Apply the Linux kernel patch that fixes the nvmet-tcp issue by ensuring nvmet_tcp_set_queue_sock() return values are checked and proper cleanup is performed on failure.

Hi! I’m here to help you understand CVE-2026-74385. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70