CVE-2026-72128
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmet_sq_create() In nvmet_sq_create(), a reference on the ctrl is taken via kref_get_unless_zero() before calling nvmet_check_sqid(). If nvmet_check_sqid() fails, the function returns the error directly without releasing the reference, leading to a leak. Fix this by jumping to the "ctrl_put" label, which already performs the necessary nvmet_ctrl_put(ctrl). This ensures the reference is properly released on this error path.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux26355295ce21cb046546085c3a81abe68160a784, fcef60ed5f714a24104eb021d6397a67955ebeff, 34b9a83c50660148bde01cde16451dbe78369749 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1eb380caf5275bba1d3d6182dde1fd740f331743 ≤ v < 26355295ce21cb046546085c3a81abe68160a784, 1eb380caf5275bba1d3d6182dde1fd740f331743 ≤ v < fcef60ed5f714a24104eb021d6397a67955ebeff, 1eb380caf5275bba1d3d6182dde1fd740f331743 ≤ v < 34b9a83c50660148bde01cde16451dbe78369749, 6.14 | 26355295ce21cb046546085c3a81abe68160a784, fcef60ed5f714a24104eb021d6397a67955ebeff, 34b9a83c50660148bde01cde16451dbe78369749 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.