CVE-2026-64321
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
25/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
nvme: target: rdma: fix ndev refcount leak on queue connect<br />
<br />
nvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which<br />
acquires a reference on the returned ndev via kref_get(). On the path<br />
where the host queue backlog is exceeded and the function returns<br />
NVME_SC_CONNECT_CTRL_BUSY, reference of ndev is not released, leaking<br />
the kref.<br />
<br />
Fix this by adding a goto to the existing put_device label before the<br />
early return.



