CVE-2026-64072: nvme: fix bio leak on mapping failure
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix bio leak on mapping failure
The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request.
Affected Software
Remediation
Event History
Frequently Asked Questions
What access does an attacker need to trigger this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the likely impact if the issue is exploited?
The reported impact is availability only, with no confidentiality or integrity impact indicated. The vulnerability can cause a bio memory leak when integrity mapping fails.
Which systems should be prioritized for remediation?
Prioritize Linux kernel systems using NVMe where integrity mapping failures may occur. The provided data does not identify affected kernel versions or configuration conditions.
Is a fix available?
Yes. A patch is available, with fixes referenced in the Linux stable kernel repository.