CVE-2026-80862

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-80862

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80862.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2026-80862

Downstream

Related

openSUSE-SU-2026:11773-1

Published

2026-09-04T15:55:16Z

Modified

2026-09-15T18:26:43Z

Summary

nvme-tcp: fix usage of page_frag_cache

Details

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix usage of page_frag_cache

nvme uses page_frag_cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page_frag_cache is used in not thread-safe manner. That leads to incorrect refcounting of backstore pages and premature free.

That can be catched by !sendpage_ok inside network stack:

WARNING: CPU: 7 PID: 467 at ../net/core/skbuff.c:6931 skb_splice_from_iter+0xfa/0x310. tcp_sendmsg_locked+0x782/0xce0 tcp_sendmsg+0x27/0x40 sock_sendmsg+0x8b/0xa0 nvme_tcp_try_send_cmd_pdu+0x149/0x2a0 Then random panic may occur.

Fix that by serializing the usage of page_frag_cache.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80862.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

4e893ca8117022de68ce1b61c0309e3d17bb8a25

Fixed

d19f98c79f1b7e09e4cdf5c20d626e571e487467

Fixed

64561afb42d8390695bf810d9bbd087cbca00291

Fixed

0a9750263ffacbbd2048a391fd4bd22e2146c57d

Fixed

6e4cf281558709b92ec2ca3054fe2ffc69266ef9

Fixed

36ac05f7cfd59d90c597071304b14e98090d5dd1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80862.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.12.0

Fixed

6.12.108

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.49

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.1.13

Type: ECOSYSTEM
Events: Introduced

7.2.0

Fixed

7.2.3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80862.json"