{"id":"CVE-2026-64019","revision":"29115a7060f344c195c060a2fd413884","records":[{"revision":"29115a7060f344c195c060a2fd413884","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-64019","aliases":[],"title":"nvme-pci: fix dma mapping leak on data setup error","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix dma mapping leak on data setup error\n\nWe're leaking the initial DMA mapping during iteration if we fail to\nallocate the tracking descriptor for both PRP and SGL. Unmap the\niterator directly; we can't use the existing unmap helper because it\ndepends on the tracking descriptor being successfully allocated, so a\nnew one for an in-use iterator is provided.\n\nThe mappings were also leaking when the driver detects an invalid\nbio_vec when mapping PRPs, so fix that too.","state":0,"publishedAt":"2026-07-19T15:39:13.4+00:00","modifiedAt":"2026-10-15T10:07:56.071+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/nvme/host/pci.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2\",\n                            \"lessThan\": \"fba32257979dda14b0d8ed7402490ae0be44972a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2\",\n                            \"lessThan\": \"e50db059ec8e63bc50b1cc039e2502cb5ea75a70\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7ce3c1dd78fca86ea8b9aee370db10c7a8cfc3c2\",\n                            \"lessThan\": \"1bf86336e4b6cf40873fda47a7fe191446864937\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/nvme/host/pci.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.57\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0.11\",\n                            \"lessThanOrEqual\": \"7.0.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/fba32257979dda14b0d8ed7402490ae0be44972a","https://git.kernel.org/stable/c/e50db059ec8e63bc50b1cc039e2502cb5ea75a70","https://git.kernel.org/stable/c/1bf86336e4b6cf40873fda47a7fe191446864937"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64019","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-64019","identifiers":["CVE-2026-64019"]},"retained":false,"historicalAffected":[]}],"coverage":[]}