SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64020

HIGH · CVSS 7.5 EPSS 0.34%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A memory leak vulnerability in the Linux kernel's NVMe PCI subsystem affects systems utilizing peer-to-peer (P2P) memory, potentially leading to resource exhaustion and degraded performance. This issue could be exploited to compromise system stability or availability, making it critical for organizations using affected Linux distributions to prioritize patching. System administrators and security teams should take immediate action to mitigate risks associated with this vulnerability.

CVE
CVE-2026-64020
Severity
HIGH
CVSS
7.5
EPSS
0.34%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma_vec allocation was getting leaked on the completion.