CVE-2026-64072 describes a memory leak vulnerability in the Linux kernel's NVMe driver. Specifically, when integrity mapping failed, the code leaked a bio structure because it incorrectly assumed a local bio pointer was valid when it was always NULL. The fix involved obtaining the bio directly from the request to prevent the leak.

The vulnerability results in a memory leak in the Linux kernel NVMe driver during integrity mapping failures. While this does not directly lead to code execution or privilege escalation, memory leaks can degrade system stability and potentially be leveraged in complex attack scenarios. No known exploits are reported in the wild.

A fix for this vulnerability has been implemented in the Linux kernel. Users should update to a kernel version that includes this patch to prevent the bio memory leak. Since no vendor advisory or patch links are provided, check the official Linux kernel release notes or trusted Linux distribution advisories for the specific fixed version.