nvme-pci: fix dma mapping leak on data setup error
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing unmap helper because it depends on the tracking descriptor being successfully allocated, so a new one for an in-use iterator is provided. The mappings were also leaking when the driver detects an invalid bio_vec when mapping PRPs, so fix that too.
CVE-2026-64019
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-64019
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2",
"lessThan": "fba32257979dda14b0d8ed7402490ae0be44972a",
"versionType": "git"
},
{
"status": "affected",
"version": "7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2",
"lessThan": "e50db059ec8e63bc50b1cc039e2502cb5ea75a70",
"versionType": "git"
},
{
"status": "affected",
"version": "7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2",
"lessThan": "1bf86336e4b6cf40873fda47a7fe191446864937",
"versionType": "git"
}
],
"programFiles": [
"drivers/nvme/host/pci.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.17"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.17",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.18.57",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.0.11",
"versionType": "semver",
"lessThanOrEqual": "7.0.*"
},
{
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/nvme/host/pci.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-64019
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #28617 · Revision 1
- Added to Heist Feed
- Publisher date