CVE-2026-23261

A memory leak was found in the Linux kernel's NVMe over Fibre Channel (NVMe-FC) driver. In nvme_fc_init_ctrl(), when controller initialization fails after admin blk-mq resources are allocated, the fail_ctrl error path does not free the admin queue tagset. This causes blk-mq allocations to leak, as detected by kmemleak during blktests nvme/fc testing.

This flaw affects systems using NVMe over Fibre Channel storage. The memory leak occurs when controller initialization fails after admin queue setup but before completion, which is an error handling path. The issue was found during automated testing with blktests. While repeated controller initialization failures could consume kernel memory, this does not lead to crashes or code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.