CVE-2026-23261 is a vulnerability in the Linux kernel's nvme-fc driver where admin tagset resources are not released if controller initialization fails, leading to a memory leak. The issue occurs during the NVMe/FC controller creation process when failure paths do not free allocated admin queue/tag set resources. This flaw has been addressed by adding a check to release these resources on initialization failure.