THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64071 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_sgt via dma_free_noncontiguous() but never clears the pointer afterward. This leads to a use-after-free if nvme_free_hos

[NVD] CVE-2026-64071 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_sgt via dma_free_noncontiguous() but never clears the pointer afterward. This leads to a use-after-free if nvme_free_hos

lownvdPublished 2026-07-19

CVE-2026-64071 CVSS: 7.8 HIGH Published: 2026-07-19T16:17:47.687

In the Linux kernel, the following vulnerability has been resolved:

nvme-pci: fix use-after-free in nvme_free_host_mem()

nvme_free_host_mem() frees dev->hmb_sgt via dma_free_noncontiguous() but never clears the pointer afterward. This leads to a use-after-free if nvme_free_host_mem() is called twice in the same error path.

This

Indicators of compromise

CVE-2026-64071cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64071