CVE-2026-89970
Description
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmet_auth_sq_free() cancels auth_expired_work with cancel_delayed_work(). If the work has already started, cancellation does not wait for the callback. Transport teardown can consequently free or reuse the queue containing struct nvmet_sq while nvmet_auth_expired_work() still accesses that SQ. Add a teardown-specific helper that synchronously drains the delayed work before freeing authentication state, and use it from nvmet_sq_destroy(). Keep the non-synchronous helper for in-band authentication state cleanup, where the SQ owner remains alive.
How to fix
- Linux Linux664022fa1c93f4eba09ef5ee02411b9709dd7a93, c3c126a6142a1335bc8c34a5607c39cf01daf295, c17c87bde6d6f5252a6a6f0a94b2430164aa28d5, 7555ddd60af72df2862dd8f9b730a9848577edda, eb4f9127a2b8a152743f1ee597627e2f69cb54fe, eaa948c0e19b1bb2d93262207bca0c3d19cc3406 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1a70200f404ae210b4f0334e3936e84f8edb6bc8 ≤ v < 664022fa1c93f4eba09ef5ee02411b9709dd7a93, 1a70200f404ae210b4f0334e3936e84f8edb6bc8 ≤ v < c3c126a6142a1335bc8c34a5607c39cf01daf295, 1a70200f404ae210b4f0334e3936e84f8edb6bc8 ≤ v < c17c87bde6d6f5252a6a6f0a94b2430164aa28d5, 1a70200f404ae210b4f0334e3936e84f8edb6bc8 ≤ v < 7555ddd60af72df2862dd8f9b730a9848577edda, 1a70200f404ae210b4f0334e3936e84f8edb6bc8 ≤ v < eb4f9127a2b8a152743f1ee597627e2f69cb54fe, 1a70200f404ae210b4f0334e3936e84f8edb6bc8 ≤ v < eaa948c0e19b1bb2d93262207bca0c3d19cc3406, 6.0 | 664022fa1c93f4eba09ef5ee02411b9709dd7a93, c3c126a6142a1335bc8c34a5607c39cf01daf295, c17c87bde6d6f5252a6a6f0a94b2430164aa28d5, 7555ddd60af72df2862dd8f9b730a9848577edda, eb4f9127a2b8a152743f1ee597627e2f69cb54fe, eaa948c0e19b1bb2d93262207bca0c3d19cc3406 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.