CVE-2026-64319

A flaw was found in the Linux kernel's nvmet-auth component. A remote attacker, by sending a specially crafted NVMe-oF (NVMe over Fabrics) authentication reply message, can cause an out-of-bounds read in the kernel's memory. This vulnerability, exploitable pre-authentication, can lead to the disclosure of sensitive information and potentially a denial of service (DoS) on the affected system.

This vulnerability is rated as Moderate because exploitation requires a specialized target configuration with NVMe over Fabrics in-band authentication enabled, which is not configured by default on Red Hat Enterprise Linux. Although the flaw is triggerable prior to successful authentication, standard deployments do not expose the affected target subsystem unless explicitly configured as an NVMe-oF target. An attacker sending malformed reply parameters can cause out-of-bounds heap reads, leading to target instability or unintended memory disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.