Potential Use-After-Free Vulnerability in Linux Kernel's NVMe/TCP

CVE-2026-64535

What is CVE-2026-64535?

A vulnerability in the Linux kernel's NVMe/TCP implementation could lead to a use-after-free condition during data transfer. When a data digest is enabled and a digest mismatch occurs, the error handler fails to complete specific commands properly. This oversight allows subsequent processes to mistakenly attempt further operations on commands that have already been uninitialized, risking stability and security in data handling practices.

References