SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64019

UNKNOWN · CVSS N/A EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's NVMe PCI subsystem, where a DMA mapping leak occurs during data setup errors, specifically when failing to allocate tracking descriptors for PRP and SGL. This can lead to potential memory leaks, impacting system performance and stability. Linux administrators and developers working with NVMe devices should prioritize addressing this issue to ensure optimal system integrity and resource management.

CVE
CVE-2026-64019
Severity
UNKNOWN
CVSS
N/A
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing unmap helper because it depends on the tracking descriptor being successfully allocated, so a new one for an in-use iterator is provided. The mappings were also leaking when the driver detects an invalid bio_vec when mapping PRPs, so fix that too.