CVE-2026-98152

NameCVE-2026-98152
DescriptionIn the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backlog limit, the connect path only drops the device reference and leaks the newly allocated queue and its IB resources.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-4817-1, DSA-6528-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)bookworm6.1.176-1fixed
bookworm (security)6.1.187-1fixed
trixie6.12.107-1vulnerable
trixie (security)6.12.113-1fixed
forky7.2.9-1fixed
sid7.2.11-1fixed
linux-6.12 (PTS)bookworm (security)6.12.111-1~deb12u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsourcebookworm(not affected)
linuxsourcetrixie6.12.111-1DSA-6528-1
linuxsource(unstable)7.2.7-1
linux-6.12sourcebookworm6.12.111-1~deb12u1DLA-4817-1

Notes

[bookworm] - linux <not-affected> (Vulnerable code not present)
https://git.kernel.org/linus/fb1ed67788e21832b614c23767a088c08cfdd2f2 (7.3-rc2)

Search for package or bug name: Reporting problems