CVE-2026-89971

A flaw was found in the Linux kernel's NVMe (NVM Express) driver. A malicious or malformed NVMe device or target can exploit this by failing a specific Identify Namespace or Identify Controller command. This incorrect handling of the command's status code leads to the system processing zero-initialized zone information. Consequently, this can cause a shift-out-of-bounds error, resulting in a system crash and a Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact because triggering the condition requires connecting to a specially crafted or faulty NVMe storage device or attaching to an untrusted NVMe-over-Fabrics target, actions that normally require root privileges or physical access to host hardware. In standard Red Hat Enterprise Linux deployments, NVMe connections are restricted to trusted storage fabrics and validated local drives. Consequently, an unprivileged local attacker cannot trigger this issue without an administrator or privileged service establishing a connection to an adversary-controlled NVMe endpoint.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.