CVE-2026-64019 Details
Description
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the initial DMA mapping during iteration if we fail to allocate the tracking descriptor for both PRP and SGL. Unmap the iterator directly; we can't use the existing unmap helper because it depends on the tracking descriptor being successfully allocated, so a new one for an in-use iterator is provided. The mappings were also leaking when the driver detects an invalid bio_vec when mapping PRPs, so fix that too.
A vulnerability in the Linux kernel's NVMe over PCI driver can lead to a DMA mapping leak. This issue occurs when the driver fails to allocate a tracking descriptor for both Partial Request Pages (PRP) and Scatter-Gather Lists (SGL), causing the initial DMA mapping to leak during iteration. The problem also arises when the driver encounters an invalid bio_vec while mapping PRPs. The vulnerability affects the stable versions of the Linux kernel.
Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1bf86336e4b6cf40873fda47a7fe191446864937 | kernel.org | |
| https://git.kernel.org/stable/c/e50db059ec8e63bc50b1cc039e2502cb5ea75a70 | kernel.org |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
No affected product data is available for this CVE.
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 19, 2026 | New CVE Received | kernel.org |