-

CVE-2026-80862

nvme-tcp: fix usage of page_frag_cache

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix usage of page_frag_cache

nvme uses page_frag_cache to preallocate PDU for each preallocated request
of block device. Block devices are created in parallel threads,
consequently page_frag_cache is used in not thread-safe manner.
That leads to incorrect refcounting of backstore pages and premature free.

That can be catched by !sendpage_ok inside network stack:

WARNING: CPU: 7 PID: 467 at ../net/core/skbuff.c:6931 skb_splice_from_iter+0xfa/0x310.
	tcp_sendmsg_locked+0x782/0xce0
	tcp_sendmsg+0x27/0x40
	sock_sendmsg+0x8b/0xa0
	nvme_tcp_try_send_cmd_pdu+0x149/0x2a0
Then random panic may occur.

Fix that by serializing the usage of page_frag_cache.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4e893ca8117022de68ce1b61c0309e3d17bb8a25
Version < d19f98c79f1b7e09e4cdf5c20d626e571e487467
Status affected
Version 4e893ca8117022de68ce1b61c0309e3d17bb8a25
Version < 64561afb42d8390695bf810d9bbd087cbca00291
Status affected
Version 4e893ca8117022de68ce1b61c0309e3d17bb8a25
Version < 0a9750263ffacbbd2048a391fd4bd22e2146c57d
Status affected
Version 4e893ca8117022de68ce1b61c0309e3d17bb8a25
Version < 6e4cf281558709b92ec2ca3054fe2ffc69266ef9
Status affected
Version 4e893ca8117022de68ce1b61c0309e3d17bb8a25
Version < 36ac05f7cfd59d90c597071304b14e98090d5dd1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 6.12.*
Version 6.12.108
Status unaffected
Version <= 6.18.*
Version 6.18.49
Status unaffected
Version <= 7.1.*
Version 7.1.13
Status unaffected
Version <= 7.2.*
Version 7.2.3
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.051
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d19f98c79f1b7e09e4cdf5c20d626e571e487467
https://git.kernel.org/stable/c/64561afb42d8390695bf810d9bbd087cbca00291
https://git.kernel.org/stable/c/0a9750263ffacbbd2048a391fd4bd22e2146c57d
https://git.kernel.org/stable/c/6e4cf281558709b92ec2ca3054fe2ffc69266ef9
https://git.kernel.org/stable/c/36ac05f7cfd59d90c597071304b14e98090d5dd1