CVE-2026-89975

A flaw was found in the Linux kernel's nvme-fabrics module. A local attacker could repeatedly provide malformed DHCHAP (Diffie-Hellman Challenge-Handshake Authentication Protocol) secrets, leading to a memory leak. This vulnerability occurs during the parsing of these secrets, where temporary strings containing sensitive data are not properly freed upon validation failure. Consequently, an attacker could potentially gain access to secret material.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.