CVE-2025-38264

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/07/2025
Last modified:
09/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> nvme-tcp: sanitize request list handling<br /> <br /> Validate the request in nvme_tcp_handle_r2t() to ensure it&amp;#39;s not part of<br /> any list, otherwise a malicious R2T PDU might inject a loop in request<br /> list processing.

Impact