CVE-2026-90412 PUBLISHED

nvmet: fix return status of RMI log page on allocation failure

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix return status of RMI log page on allocation failure

nvmet_execute_get_log_page_rmi() leaves 'status' holding NVME_SC_SUCCESS (set by the successful nvmet_req_find_ns() call) when the kzalloc() for the log buffer fails. It then jumps to the out label and completes the request with a success status, so the host is told the command succeeded while no data was transferred.

Initialize 'status' to NVME_SC_INTERNAL, matching the smart log handler, so an allocation failure is reported as an internal error.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 5fd075cdaf3649000677d960fd9e45c08081b7e0 to 9e136150ac55df4b7ea36e6110ffa39d08905f37 (excl.)
  • affected from 5fd075cdaf3649000677d960fd9e45c08081b7e0 to 581d8bb556dd3e5567bcf322aa5e3e4b6a200c08 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.13 is affected
  • unaffected from 0 to 6.13 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References