Threats tagged 'ghsa-6vg3-7hp6-mqc5'

CVE-2026-64534 is a critical vulnerability in the Linux kernel's nvmet-tcp subsystem. It involves an unconditional call to nvmet_req_uninit() after a data digest mismatch, which can cause a reference count underflow if the command initialization failed. This leads to a warning, use-after-free diagnostic, and a permanent workqueue deadlock.