Thread Safety Vulnerability in Linux Kernel Affecting nvme Product

CVE-2026-80862

What is CVE-2026-80862?

A thread safety vulnerability in the Linux kernel's nvme implementation can lead to incorrect reference counting of backstore pages due to improper use of page_frag_cache. This vulnerability occurs when block devices are created in parallel threads, resulting in the potential for premature freeing of memory and random system panics. The issue has been addressed by serializing the usage of page_frag_cache to enhance safety and ensure correct memory management during data transmission.

References