Riskcovery

CVE-2026-64019

nvme-pci: fix dma mapping leak on data setup error

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Oct 15, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme-pci: fix dma mapping leak on data setup error

We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing unmap helper because it depends on the tracking descriptor being successfully allocated, so a new one for an in-use iterator is provided.

The mappings were also leaking when the driver detects an invalid bio_vec when mapping PRPs, so fix that too.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2 to before fba32257979dda14b0d8ed7402490ae0be44972aAffected
  • 7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2 to before e50db059ec8e63bc50b1cc039e2502cb5ea75a70Affected
  • 7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2 to before 1bf86336e4b6cf40873fda47a7fe191446864937Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.