CVE-2026-23360

Source
https://cve.org/CVERecord?id=CVE-2026-23360
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23360.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23360
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
OESA (2)
openSUSE (1)
ROOT (2)
SUSE (4)
UBUNTU (1)
Related
Published
2026-03-25T10:27:43Z
Modified
2026-10-08T02:49:51Z
Summary
nvme: fix admin queue leak on controller reset
Details

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix admin queue leak on controller reset

When nvme_alloc_admin_tag_set() is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queue.

This fixes a regression introduced by commit 03b3bcd319b3 ("nvme: fix admin request_queue lifetime").

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23360.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ff037b5f47eeccc1636c03f84cd47db094eb73c9
Fixed
089a6f17881a82c6c6e05f8564a867be0767eade
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4896491c497226022626c3acc46044fd182f943c
Fixed
6e28bab900e40e4d610b04f9f82e01983d8fb356
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a505f0ba36ab24176c300d7ff56aff85c2977e6c
Fixed
2efbc838a26d3da72d8fe05770bdf869d4ca3ac5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e8061d02b49c5c901980f58d91e96580e9a14acf
Fixed
64f87b96de0e645a4c066c7cffd753f334446db6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
03b3bcd319b3ab5182bc9aaa0421351572c78ac0
Fixed
e159eb852aeee95443a9458ecb7d072bbb689913
Fixed
8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f
Fixed
b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.1.167
Fixed
6.1.168
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.6.120
Fixed
6.6.131
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.62
Fixed
6.12.77
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.17.12
Fixed
6.18
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e7dac681790556c131854b97551337aa8042215b

Affected versions

v6.*
v6.1.167
v6.12.62
v6.12.63
v6.12.64
v6.12.65
v6.12.66
v6.12.67
v6.12.68
v6.12.69
v6.12.70
v6.12.71
v6.12.72
v6.12.73
v6.12.74
v6.12.75
v6.12.76
v6.17.12
v6.17.13
v6.6.120
v6.6.121
v6.6.122
v6.6.123
v6.6.124
v6.6.125
v6.6.126
v6.6.127
v6.6.128
v6.6.129
v6.6.130

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23360.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.1.168
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.131
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.77
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.17
Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.19.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23360.json"