CVE-2025-38264
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/07/2025
Last modified:
09/07/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nvme-tcp: sanitize request list handling<br />
<br />
Validate the request in nvme_tcp_handle_r2t() to ensure it&#39;s not part of<br />
any list, otherwise a malicious R2T PDU might inject a loop in request<br />
list processing.