Critical · published July 9, 2025
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: sanitize request list handling
Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of
any list, otherwise a malicious R2T PDU might inject a loop in request
list processing.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.0, < 6.12.36 | 6.12.36 |
| linux/linux_kernel | ≥ 6.13, < 6.15.5 | 6.15.5 |