Threats tagged 'ghsa-xjx5-8v38-q6gh'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.8%	CVE-2026-22998Linux kernel · nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec High7.5EPSS 0.8%2026-01-25GCVE DatabaseCVE-2026-22998 A vulnerability in the Linux kernel's nvme-tcp driver (CVE-2026-22998) could cause NULL pointer dereferences leading to kernel panic. This happens when the nvmet_tcp_build_pdu_iovec() function dereferences uninitialized command data structures without proper NULL checks. The issue can be triggered by sending specific H2C_DATA PDUs prematurely or with invalid command states. The vulnerability has been fixed in updated Linux kernel versions. EPSS 0.8%Report on CVE-2026-22998 Vulnerability CWE-476 #ghsa-xjx5-8v38-q6gh	GCVE Database	2026-01-25

Page 1 of 1