01 Record

CVE-2026-23360

nvme: fix admin queue leak on controller reset

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

nvme: fix admin queue leak on controller reset

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 2.1% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-03-25 10:27Z7 MO AGO

Last updated

2026-05-23 16:04Z5 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

abba9e70e43bf9be9e178a3f8774c9d886098ba8c65cf73bbc9c797c6bbd265d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxff037b5f47eeccc1636c03f84cd47db094eb73c9 to < 089a6f17881a82c6c6e05f8564a867be0767eade, 4896491c497226022626c3acc46044fd182f943c to < 6e28bab900e40e4d610b04f9f82e01983d8fb356, a505f0ba36ab24176c300d7ff56aff85c2977e6c to < 2efbc838a26d3da72d8fe05770bdf869d4ca3ac5, e8061d02b49c5c901980f58d91e96580e9a14acf to < 64f87b96de0e645a4c066c7cffd753f334446db6, 03b3bcd319b3ab5182bc9aaa0421351572c78ac0 to < e159eb852aeee95443a9458ecb7d072bbb689913, 03b3bcd319b3ab5182bc9aaa0421351572c78ac0 to < 8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f, 03b3bcd319b3ab5182bc9aaa0421351572c78ac0 to < b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d, e7dac681790556c131854b97551337aa8042215b, 6.1.167 to < 6.1.168, 6.6.120 to < 6.6.131, 6.12.62 to < 6.12.77, 6.17.12 to < 6.18, 6.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/089a6f17881a82c6c6e05f8564a867be0767eade
git.kernel.orghttps://git.kernel.org/stable/c/6e28bab900e40e4d610b04f9f82e01983d8fb356
git.kernel.orghttps://git.kernel.org/stable/c/2efbc838a26d3da72d8fe05770bdf869d4ca3ac5
git.kernel.orghttps://git.kernel.org/stable/c/64f87b96de0e645a4c066c7cffd753f334446db6
git.kernel.orghttps://git.kernel.org/stable/c/e159eb852aeee95443a9458ecb7d072bbb689913
git.kernel.orghttps://git.kernel.org/stable/c/8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f
git.kernel.orghttps://git.kernel.org/stable/c/b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d

07 Fixed in

Debian 13

linux
Fixed in 6.12.85-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.