CVE-2026-98152
Published: September 29, 2026Last modified: September 29, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backlog limit, the connect path only drops the device reference and leaks the newly allocated queue and its IB resources.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | NONE |
| Integrity impact | NONE |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Not affected (6.1.33-r0) |
| 25 LTS | linux-lts | Fixed (6.12.111-r0) | |
| Stream | linux-lts | Fixed (6.18.53-r0) |
References
- https://git.kernel.org/stable/c/186414a6a1a34e081b07e8873622f90402346235
- https://git.kernel.org/stable/c/287420cde9d6669abcd2878c344db67423eb7df6
- https://git.kernel.org/stable/c/32e598324edc3ebb1ac9362d5b9fc30ce0de4873
- https://git.kernel.org/stable/c/4f7cf573cdf0ee857448b9b1967d686b07c71e7d
- https://git.kernel.org/stable/c/60d56bf0b14d3c545bacb9aeef92a7e6f2cf0caa
- https://git.kernel.org/stable/c/e48f9d1076f8c62c3969588d638602b94aaeff12
- https://git.kernel.org/stable/c/fb1ed67788e21832b614c23767a088c08cfdd2f2