CVE-2026-52989

A flaw was found in the nvmet-tcp component of the Linux kernel. The nvmet_tcp_build_pdu_iovec() function fails to propagate errors when detecting out-of-bounds PDU lengths or offsets. This can lead to uninitialized memory being used by subsequent operations, such as reading incoming network data into an uninitialized iterator. A remote attacker could potentially exploit this memory corruption to cause a denial of service or achieve arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

For Red Hat Enterprise Linux, mitigation for this issue is not applicable as the product is not affected.

For Red Hat In-Vehicle OS, if the NVM Express over TCP (nvmet-tcp) functionality is not required, the nvmet_tcp kernel module can be prevented from loading. To do this, create a file named /etc/modprobe.d/disable-nvmet-tcp.conf with the following content: install nvmet_tcp /bin/true blacklist nvmet_tcp After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. Disabling this module may impact storage functionality if NVMe over TCP is in use.