CVE-2026-90412
Description
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page_rmi() leaves 'status' holding NVME_SC_SUCCESS (set by the successful nvmet_req_find_ns() call) when the kzalloc() for the log buffer fails. It then jumps to the out label and completes the request with a success status, so the host is told the command succeeded while no data was transferred. Initialize 'status' to NVME_SC_INTERNAL, matching the smart log handler, so an allocation failure is reported as an internal error.
How to fix
- Linux Linuxffd56ada81f975a33f1df447f1bec9090a818e98, 9e136150ac55df4b7ea36e6110ffa39d08905f37, 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5fd075cdaf3649000677d960fd9e45c08081b7e0 ≤ v < ffd56ada81f975a33f1df447f1bec9090a818e98, 5fd075cdaf3649000677d960fd9e45c08081b7e0 ≤ v < 9e136150ac55df4b7ea36e6110ffa39d08905f37, 5fd075cdaf3649000677d960fd9e45c08081b7e0 ≤ v < 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08, 6.13 | ffd56ada81f975a33f1df447f1bec9090a818e98, 9e136150ac55df4b7ea36e6110ffa39d08905f37, 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.