Riskcovery

CVE-2026-90412

nvmet: fix return status of RMI log page on allocation failure

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix return status of RMI log page on allocation failure

nvmet_execute_get_log_page_rmi() leaves 'status' holding NVME_SC_SUCCESS (set by the successful nvmet_req_find_ns() call) when the kzalloc() for the log buffer fails. It then jumps to the out label and completes the request with a success status, so the host is told the command succeeded while no data was transferred.

Initialize 'status' to NVME_SC_INTERNAL, matching the smart log handler, so an allocation failure is reported as an internal error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5fd075cdaf3649000677d960fd9e45c08081b7e0 to before ffd56ada81f975a33f1df447f1bec9090a818e98Affected
  • 5fd075cdaf3649000677d960fd9e45c08081b7e0 to before 9e136150ac55df4b7ea36e6110ffa39d08905f37Affected
  • 5fd075cdaf3649000677d960fd9e45c08081b7e0 to before 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.