AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74385

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's nvmet-tcp component, where the failure to check the return value of the nvmet_tcp_set_queue_sock() function can lead to improper socket callback handling and potential resource leaks. This issue could result in degraded performance or denial of service due to queue and socket leakage. System administrators and developers managing Linux environments that utilize nvmet-tcp should prioritize applying the fix to mitigate these risks.

CVE
CVE-2026-74385
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock The return value of nvmet_tcp_set_queue_sock() is currently ignored in nvmet_tcp_tls_handshake_done(). If it fails (e.g., due to the socket not being in TCP_ESTABLISHED state), the socket callbacks will not be properly set, leading to queue and socket leakage. Fix this by capturing the return value and calling nvmet_tcp_schedule_release_queue() on failure to ensure proper cleanup.