In the Linux kernel, the following vulnerability has been resolved: nvme: fix command effects log lifetime for multipath heads KASAN reported a… (CVE-2026-98814)

The Linux kernel NVMe driver had a use-after-free vulnerability triggered by sending an I/O passthrough command through a multipath namespace head after the original controller path was removed. KASAN detected a slab-use-after-free in the nvme_command_effects function. The vulnerability was addressed by relocating the log cache to the subsystem, ensuring that both controllers and namespace heads hold references to the subsystem, thus keeping log pointers valid until the subsystem is released.

This vulnerability could lead to kernel memory corruption due to use-after-free conditions, potentially causing system instability or crashes. No information about exploitation in the wild is available.

A fix has been applied in the Linux kernel to address this vulnerability. Users should update to the patched kernel version containing this fix. No additional mitigation steps are indicated.