CVE-2026-90412

A flaw was found in the nvmet component of the Linux kernel. When processing an RMI log page, if memory allocation for the log buffer fails, the system incorrectly reports a successful operation to the host. This can lead to the host believing data was transferred when it was not, potentially causing data integrity issues or unexpected behavior.

This vulnerability is rated as having a Moderate impact because it requires the system to be actively configured as an NVMe target and depends on memory allocation failure to trigger. In standard Red Hat Enterprise Linux environments, NVMe target services are not enabled by default, restricting exposure to hosts explicitly configured for NVMe over Fabrics storage. Even when active, the flaw fails to signal an internal error back to the host rather than permitting privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.