Description
In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queue. This fixes a regression introduced by commit 03b3bcd319b3 ("nvme: fix admin request_queue lifetime").
References (7)
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
3.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (26)
linux/Kernel
< 6.12.77linux
linux/Kernel
6.13.0 - 6.18.17linux
linux/Kernel
6.18.0 - 6.19.7linux
Linux/Linux
< 6.18
Linux/Linux
03b3bcd319b3ab5182bc9aaa0421351572c78ac0 - 8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f
Linux/Linux
03b3bcd319b3ab5182bc9aaa0421351572c78ac0 - b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d
Linux/Linux
03b3bcd319b3ab5182bc9aaa0421351572c78ac0 - e159eb852aeee95443a9458ecb7d072bbb689913
Linux/Linux
4896491c497226022626c3acc46044fd182f943c - 6e28bab900e40e4d610b04f9f82e01983d8fb356
Linux/Linux
6.1.168 - 6.1.*
Linux/Linux
6.12.77 - 6.12.*
... and 16 more
Published
Mar 25, 2026
Tracked Since
Mar 25, 2026