CVE-2026-80862

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-80862

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80862.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-80862

Downstream

DEBIAN-CVE-2026-80862

Published

2026-09-04T15:55:16.653Z

Modified

2026-09-06T03:46:27.815590184Z

Summary

nvme-tcp: fix usage of page_frag_cache

Details

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix usage of pagefragcache

nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently pagefragcache is used in not thread-safe manner. That leads to incorrect refcounting of backstore pages and premature free.

That can be catched by !sendpage_ok inside network stack:

WARNING: CPU: 7 PID: 467 at ../net/core/skbuff.c:6931 skbsplicefromiter+0xfa/0x310. tcpsendmsglocked+0x782/0xce0 tcpsendmsg+0x27/0x40 socksendmsg+0x8b/0xa0 nvmetcptrysendcmdpdu+0x149/0x2a0 Then random panic may occur.

Fix that by serializing the usage of pagefragcache.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80862.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4e893ca8117022de68ce1b61c0309e3d17bb8a25

Fixed

d19f98c79f1b7e09e4cdf5c20d626e571e487467

Fixed

64561afb42d8390695bf810d9bbd087cbca00291

Fixed

0a9750263ffacbbd2048a391fd4bd22e2146c57d

Fixed

6e4cf281558709b92ec2ca3054fe2ffc69266ef9

Fixed

36ac05f7cfd59d90c597071304b14e98090d5dd1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80862.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.12.0

Fixed

6.12.108

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.49

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.1.13

Type: ECOSYSTEM
Events: Introduced

7.2.0

Fixed

7.2.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80862.json"