CVE-2026-64320 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 nvmet admin-cmd.c nvmet_execute_disc_get_log_page lpo out-of-bounds

July 25, 2026 Yanac

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.95/6.18.38/7.1.3. Affected is the function nvmet_execute_disc_get_log_page of the file admin-cmd.c of the component nvmet. The manipulation of the argument lpo results in out-of-bounds read.

This vulnerability was named CVE-2026-64320. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More