CVE-2026-93151 Linux CVE debrief

Who should care

System administrators and security teams responsible for Linux kernel-based systems, especially those using NVMe over RDMA, should be aware of this vulnerability and prioritize patching to prevent potential memory exhaustion issues.

Why it matters

CVE-2026-93151 is a memory leak vulnerability in the Linux kernel's nvmet-rdma component. Defenders should prioritize patching, especially in environments using NVMe over RDMA, to prevent potential memory exhaustion. The vulnerability allows an attacker to cause memory leaks, leading to system instability or crashes. Verification of patches and assessment of exposure are crucial.

• Memory leaks can lead to memory exhaustion, potentially causing system instability or crashes.
• Successful exploitation requires the ability to trigger the teardown of an NVMe target with RDMA transport while I/Os are in flight.
• Defenders should verify the presence of patches and assess exposure in their environments.
• Remediation priority is high for environments using NVMe over RDMA.

Technical summary

The vulnerability exists in the Linux kernel's nvmet-rdma component, which is responsible for handling NVMe over RDMA traffic. When an NVMe target with RDMA transport is removed while I/Os are in flight, responses can be posted but their send completions are never delivered, leading to memory leaks of allocated RDMA read/write contexts and request SGLs. The issue is resolved by reclaiming memory of in-flight responses when the queue QP is torn down.

Defensive priority

Defenders should prioritize patching this vulnerability, especially in environments using NVMe over RDMA, to prevent potential memory exhaustion.

Recommended defensive actions

• Apply patches provided by the Linux kernel maintainers to fix the memory leak vulnerability in nvmet-rdma.
• Review and update NVMe over RDMA configurations to ensure proper teardown of queue QPs.
• Monitor system memory usage and investigate potential memory exhaustion issues in environments using NVMe over RDMA.
• Perform a thorough review of the system for any signs of memory leaks or related issues.
• Verify that all necessary patches are applied and up-to-date.
• Conduct regular security audits to identify potential vulnerabilities.
• Implement compensating controls to mitigate potential risks associated with this vulnerability.

Evidence notes

The vulnerability was introduced in the Linux kernel and affects the nvmet-rdma component. Memory leaks occur when an NVMe target with RDMA transport is removed while I/Os are in flight. The issue is resolved by reclaiming memory of in-flight responses when the queue QP is torn down.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.