-

CVE-2025-38264

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: sanitize request list handling

Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of
any list, otherwise a malicious R2T PDU might inject a loop in request
list processing.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < 78a4adcd3fedb0728436e8094848ebf4c6bae006
Version 3f2304f8c6d6ed97849057bd16fee99e434ca796
Status affected
Version < f054ea62598197714a6ca7b3b387a027308f8b13
Version 3f2304f8c6d6ed97849057bd16fee99e434ca796
Status affected
Version < 0bf04c874fcb1ae46a863034296e4b33d8fbd66c
Version 3f2304f8c6d6ed97849057bd16fee99e434ca796
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 5.0
Status affected
Version < 5.0
Version 0
Status unaffected
Version <= 6.12.*
Version 6.12.36
Status unaffected
Version <= 6.15.*
Version 6.15.5
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.052
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string