CVE-2026-90412nvmet: fix return status of RMI log page on allocation failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page_rmi() leaves 'status' holding NVME_SC_SUCCESS (set by the successful nvmet_req_find_ns() call) when the kzalloc() for the log buffer fails. It then jumps to the out label and completes the request with a success status, so the host is told the command succeeded while no data was transferred. Initialize 'status' to NVME_SC_INTERNAL, matching the smart log handler, so an allocation failure is reported as an internal error.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5fd075cdaf3649000677d960fd9e45c08081b7e0 before ffd56ada81f975a33f1df447f1bec9090a818e98; from 5fd075cdaf3649000677d960fd9e45c08081b7e0 before 9e136150ac55df4b7ea36e6110ffa39d08905f37; from 5fd075cdaf3649000677d960fd9e45c08081b7e0 before 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08 | CNA record |
References
- https://git.kernel.org/stable/c/ffd56ada81f975a33f1df447f1bec9090a818e98
- https://git.kernel.org/stable/c/9e136150ac55df4b7ea36e6110ffa39d08905f37
- https://git.kernel.org/stable/c/581d8bb556dd3e5567bcf322aa5e3e4b6a200c08
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.