Not yet scoredPublished Sep 4, 2026

CVE-2026-80862nvme-tcp: fix usage of page_frag_cache

Updated under an hour ago (Oct 27, 2026, 1:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses page_frag_cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page_frag_cache is used in not thread-safe manner. That leads to incorrect refcounting of backstore pages and premature free. That can be catched by !sendpage_ok inside network stack: WARNING: CPU: 7 PID: 467 at ../net/core/skbuff.c:6931 skb_splice_from_iter+0xfa/0x310. tcp_sendmsg_locked+0x782/0xce0 tcp_sendmsg+0x27/0x40 sock_sendmsg+0x8b/0xa0 nvme_tcp_try_send_cmd_pdu+0x149/0x2a0 Then random panic may occur. Fix that by serializing the usage of page_frag_cache.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before d19f98c79f1b7e09e4cdf5c20d626e571e487467; from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before 64561afb42d8390695bf810d9bbd087cbca00291; 4e893ca8117022de68ce1b61c0309e3d17bb8a25 builds before 0a9750263ffacbbd2048a391fd4bd22e2146c57d; from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before 6e4cf281558709b92ec2ca3054fe2ffc69266ef9; from 4e893ca8117022de68ce1b61c0309e3d17bb8a25 before 36ac05f7cfd59d90c597071304b14e98090d5dd1; c57506918b078ecab7dedebef0f34dbc23ae2e46; from 6.6.160 before 6.7	CNA record

References

References

https://git.kernel.org/stable/c/d19f98c79f1b7e09e4cdf5c20d626e571e487467
https://git.kernel.org/stable/c/64561afb42d8390695bf810d9bbd087cbca00291
https://git.kernel.org/stable/c/0a9750263ffacbbd2048a391fd4bd22e2146c57d
https://git.kernel.org/stable/c/6e4cf281558709b92ec2ca3054fe2ffc69266ef9
https://git.kernel.org/stable/c/36ac05f7cfd59d90c597071304b14e98090d5dd1

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.