Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-98964 Details

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmet_req_alloc_p2pmem_sgls() assigns req->p2p_dev only after the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation fails, out_free_sg passes req->p2p_dev to pci_p2pmem_free_sgl() before that assignment has taken place. Pass the local p2p_dev argument instead, so cleanup uses the same PCI device as the successful data allocation.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/32f21607911a1f69c8f0f93a6c28fe6f8490aa98 kernel.org
https://git.kernel.org/stable/c/3c231142c4f4bb96836469eb276026ec55940093 kernel.org
https://git.kernel.org/stable/c/48c8b59429d09a7c3598de425acbc2d3f4e6647b kernel.org
https://git.kernel.org/stable/c/4aa9c0f377a4de5e8fddce76b34ee4529639a1ff kernel.org
https://git.kernel.org/stable/c/73bf0f9579633b531098a475e6e55c9316763aed kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-98964
NVD Published Date:
Oct 23, 2026
NVD Last Modified:
Oct 30, 2026
Source:
kernel.org
CVE-2026-98964 Details - Not Deferred