Back to CVE records
High 7.5Published Jul 19, 2026
CVE-2026-64020nvme-pci: fix dma_vecs leak on p2p memory
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma_vec allocation was getting leaked on the completion.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b8b7570a7ec872f2a27b775c4f8710ca8a357adf before b9390aa62fdcabdaac2d09545be05901f6cecaf5; from b8b7570a7ec872f2a27b775c4f8710ca8a357adf before 24ea0de233d9ebb5ebd6f6018eaf2084af25e3dd; from b8b7570a7ec872f2a27b775c4f8710ca8a357adf before 85686c72966c5ee637893f124ddb31a1cace7bee | CNA record |
linux linux_kernel linux:linux_kernel | from 6.17 before 7.0.11; 7.1; 7.1; 7.1; 7.1 | NVD |
References
- https://git.kernel.org/stable/c/b9390aa62fdcabdaac2d09545be05901f6cecaf5
- https://git.kernel.org/stable/c/24ea0de233d9ebb5ebd6f6018eaf2084af25e3ddpatch
- https://git.kernel.org/stable/c/85686c72966c5ee637893f124ddb31a1cace7beepatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.