CVE-2026-72128nvmet: fix refcount leak in nvmet_sq_create()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmet_sq_create() In nvmet_sq_create(), a reference on the ctrl is taken via kref_get_unless_zero() before calling nvmet_check_sqid(). If nvmet_check_sqid() fails, the function returns the error directly without releasing the reference, leading to a leak. Fix this by jumping to the "ctrl_put" label, which already performs the necessary nvmet_ctrl_put(ctrl). This ensures the reference is properly released on this error path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1eb380caf5275bba1d3d6182dde1fd740f331743 before 26355295ce21cb046546085c3a81abe68160a784; from 1eb380caf5275bba1d3d6182dde1fd740f331743 before fcef60ed5f714a24104eb021d6397a67955ebeff; from 1eb380caf5275bba1d3d6182dde1fd740f331743 before 34b9a83c50660148bde01cde16451dbe78369749 | CNA record |
References
- https://git.kernel.org/stable/c/26355295ce21cb046546085c3a81abe68160a784
- https://git.kernel.org/stable/c/fcef60ed5f714a24104eb021d6397a67955ebeff
- https://git.kernel.org/stable/c/34b9a83c50660148bde01cde16451dbe78369749
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.