CVE-2026-23360 in Kernel

Sumário (Inglês)

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix admin queue leak on controller reset

When nvme_alloc_admin_tag_set() is called during a controller reset,
a previous admin queue may still exist. Release it properly before
allocating a new one to avoid orphaning the old queue.

This fixes a regression introduced by commit 03b3bcd319b3 ("nvme: fix
admin request_queue lifetime").

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsável

Linux

Reservar

13/01/2026

Divulgação

25/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
353051	Linux Kernel nvme_alloc_admin_tag_set Negação de Serviço	401	Não definido	Correção oficial	CVE-2026-23360

Fontes

• MITRE
• NVD
• CVE Details