CVE-2026-64319

nvmet-auth: validate reply message payload bounds against transfer length

References

Notes


      

Bugs

Status

Branch Status
upstream released (7.2-rc1) [3a413ece2504c70aa34a20be4dafec04e8c741f9]
7.2-upstream-stable N/A "Fixed before branching point"
7.1-upstream-stable released (7.1.4) [caa71b3a43ea5c13fe7141cb019ebcb03b8ac857]
6.18-upstream-stable released (6.18.39) [6d7649c1231dac14d906985d2936967e23041c26]
6.12-upstream-stable released (6.12.96) [999f6205ede984a786f35f727b01f971b98e215d]
6.6-upstream-stable released (6.6.145) [80cd28b56ab62d3e7ed0a7bf05282e6d3ee5b2a0]
6.1-upstream-stable needed
5.10-upstream-stable N/A "Vulnerable code not present"
sid released (7.1.4-1)
6.12-trixie-security released (6.12.96-1)
6.1-bookworm-security needed
5.10-bullseye-security N/A "Vulnerable code not present"