{"schema":"threatline.record/2","record":{"id":"CVE-2026-98152","aliases":[],"summary":"nvmet-rdma: fix queue leak when connect backlog is exceeded","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-rdma: fix queue leak when connect backlog is exceeded\n\nWhen pending disconnecting queues exceed the backlog limit, the\nconnect path only drops the device reference and leaks the newly\nallocated queue and its IB resources.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"204b9645536bb4a77a2cb35e6519dbf9f4ea1665","lessThan":"186414a6a1a34e081b07e8873622f90402346235","status":"affected","versionType":"git"},{"version":"00eaa58988d35fd47ca8811f7f72871591f61ffb","lessThan":"e48f9d1076f8c62c3969588d638602b94aaeff12","status":"affected","versionType":"git"},{"version":"712f3268a62d0df98a7ee991cba963ced2e58007","lessThan":"32e598324edc3ebb1ac9362d5b9fc30ce0de4873","status":"affected","versionType":"git"},{"version":"d65fe42820b890a6a4644de0a95a812471f79ad3","lessThan":"287420cde9d6669abcd2878c344db67423eb7df6","status":"affected","versionType":"git"},{"version":"a8803c4f0ac3fa7df5551bbb5a8800c434a94357","lessThan":"4f7cf573cdf0ee857448b9b1967d686b07c71e7d","status":"affected","versionType":"git"},{"version":"badc53620fe813b3a9f727ef9526f98567c2c898","lessThan":"60d56bf0b14d3c545bacb9aeef92a7e6f2cf0caa","status":"affected","versionType":"git"},{"version":"badc53620fe813b3a9f727ef9526f98567c2c898","lessThan":"fb1ed67788e21832b614c23767a088c08cfdd2f2","status":"affected","versionType":"git"},{"version":"5828517d17eda27f21d29ea14800c9e0a57bad11","status":"affected","versionType":"git"},{"version":"6.12.96","lessThan":"6.12.111","status":"affected","versionType":"semver"},{"version":"6.18.39","lessThan":"6.18.53","status":"affected","versionType":"semver"},{"version":"7.1.4","lessThan":"7.2","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"7.2","status":"affected"},{"version":"0","lessThan":"7.2","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"186414a6a1a34e081b07e8873622f90402346235","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"32e598324edc3ebb1ac9362d5b9fc30ce0de4873","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"287420cde9d6669abcd2878c344db67423eb7df6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"4f7cf573cdf0ee857448b9b1967d686b07c71e7d","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"60d56bf0b14d3c545bacb9aeef92a7e6f2cf0caa","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6.12.111","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6.18.53","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","source_modified_at":"2026-10-19T09:14:45.506Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"7.2","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00114,"percentile":0.01405,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:36:24.020Z","modified_at":"2026-10-19T09:14:45.506Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98152","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:14:45.506Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98152","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/186414a6a1a34e081b07e8873622f90402346235"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/e48f9d1076f8c62c3969588d638602b94aaeff12"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/32e598324edc3ebb1ac9362d5b9fc30ce0de4873"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/287420cde9d6669abcd2878c344db67423eb7df6"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/4f7cf573cdf0ee857448b9b1967d686b07c71e7d"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/60d56bf0b14d3c545bacb9aeef92a7e6f2cf0caa"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/fb1ed67788e21832b614c23767a088c08cfdd2f2"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:14:45.506Z","content_hash":"475f3c45e12918abe5901821cf19acd1656eed5f681281770dc9a84ba7bb8605"}}