VDB
DEBIAN-CVE-2026-23112
DEBIAN-CVE-2026-23112
PUBLISHED
CVSS 9.800000190734863 CRITICAL
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offset values, leading to _copy_to_iter() GPF/KASAN. Guard sg_idx, remaining entries, and sg->length/offset before building the bvec.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | linux | 0, 6.12.38-1, 6.12.43-1 |
| Debian:12 | linux | 6.1.106-3, 6.1.106-1, 6.1.106-2 |
| Debian:11 | linux | 6.12.8-1, 6.4.1-1, 6.4.11-1 |
| Debian:11 | linux-6.1 | 6.1.159-1, 6.1.106-3~deb11u3, 6.1.112-1~deb11u1 |
| Debian:13 | linux | 6.12.41-1, 6.12.43-1, 6.12.43-1~bpo12+1 |
Exploit Intelligence
- 4081.3.7.yml (github-poc)
- vex_test.go (github-poc)
Timeline
- Feb 13, 2026 CVE Published
- May 4, 2026 CVE Updated