CVE-2026-74385
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In the Linux kernel, the nvmet-tcp module does not check the return value of nvmet_tcp_set_queue_sock(). If it fails, socket callbacks are not properly set, leading to queue and socket leakage.
Risk Assessment
Resource leak can lead to memory or other system resource exhaustion, potentially affecting system stability.
Recommendation
Apply the patch that captures the return value and calls nvmet_tcp_schedule_release_queue() on failure to ensure proper cleanup.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock The return value of nvmet_tcp_set_queue_sock() is currently ignored in nvmet_tcp_tls_handshake_done(). If it fails (e.g., due to the socket not being in TCP_ESTABLISHED state), the socket callbacks will not be properly set, leading to queue and socket leakage. Fix this by capturing the return value and calling nvmet_tcp_schedule_release_queue() on failure to ensure proper cleanup.