CVE-2026-80862nvme-tcp: fix usage of page_frag_cache
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses page_frag_cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page_frag_cache is used in not thread-safe manner. That leads to incorrect refcounting of backstore pages and premature free. That can be catched by !sendpage_ok inside network stack: WARNING: CPU: 7 PID: 467 at ../net/core/skbuff.c:6931 skb_splice_from_iter+0xfa/0x310. tcp_sendmsg_locked+0x782/0xce0 tcp_sendmsg+0x27/0x40 sock_sendmsg+0x8b/0xa0 nvme_tcp_try_send_cmd_pdu+0x149/0x2a0 Then random panic may occur. Fix that by serializing the usage of page_frag_cache.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 4, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before d19f98c79f1b7e09e4cdf5c20d626e571e487467; from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before 64561afb42d8390695bf810d9bbd087cbca00291; 4e893ca8117022de68ce1b61c0309e3d17bb8a25 builds before 0a9750263ffacbbd2048a391fd4bd22e2146c57d; from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before 6e4cf281558709b92ec2ca3054fe2ffc69266ef9; from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before 36ac05f7cfd59d90c597071304b14e98090d5dd1 | CNA record |
References
- https://git.kernel.org/stable/c/d19f98c79f1b7e09e4cdf5c20d626e571e487467
- https://git.kernel.org/stable/c/64561afb42d8390695bf810d9bbd087cbca00291
- https://git.kernel.org/stable/c/0a9750263ffacbbd2048a391fd4bd22e2146c57d
- https://git.kernel.org/stable/c/6e4cf281558709b92ec2ca3054fe2ffc69266ef9
- https://git.kernel.org/stable/c/36ac05f7cfd59d90c597071304b14e98090d5dd1
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.