{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "28877977bbc4f44dd3068b74ee781466c597a3b3"
            },
            {
              "fixed": "204b9645536bb4a77a2cb35e6519dbf9f4ea1665"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "bd3f40fdec552f9200e7b8521ef02b578c9ee8b0"
            },
            {
              "fixed": "00eaa58988d35fd47ca8811f7f72871591f61ffb"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "85a79da286b65ae2238a22ac901a0039779e613e"
            },
            {
              "fixed": "712f3268a62d0df98a7ee991cba963ced2e58007"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "31deaeb11ba7a885116c9c30892b9f763c04d59c"
            },
            {
              "fixed": "d65fe42820b890a6a4644de0a95a812471f79ad3"
            },
            {
              "fixed": "a8803c4f0ac3fa7df5551bbb5a8800c434a94357"
            },
            {
              "fixed": "5828517d17eda27f21d29ea14800c9e0a57bad11"
            },
            {
              "fixed": "badc53620fe813b3a9f727ef9526f98567c2c898"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.8.0"
            },
            {
              "fixed": "6.12.96"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.39"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64321.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: target: rdma: fix ndev refcount leak on queue connect\n\nnvmet_rdma_queue_connect() calls nvmet_rdma_find_get_device() which\nacquires a reference on the returned ndev via kref_get(). On the path\nwhere the host queue backlog is exceeded and the function returns\nNVME_SC_CONNECT_CTRL_BUSY, reference of ndev is not released, leaking\nthe kref.\n\nFix this by adding a goto to the existing put_device label before the\nearly return.",
  "id": "CVE-2026-64321",
  "modified": "2026-09-16T03:30:32.872276828Z",
  "published": "2026-07-25T08:49:49.541Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/00eaa58988d35fd47ca8811f7f72871591f61ffb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/204b9645536bb4a77a2cb35e6519dbf9f4ea1665"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5828517d17eda27f21d29ea14800c9e0a57bad11"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/712f3268a62d0df98a7ee991cba963ced2e58007"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a8803c4f0ac3fa7df5551bbb5a8800c434a94357"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/badc53620fe813b3a9f727ef9526f98567c2c898"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d65fe42820b890a6a4644de0a95a812471f79ad3"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64321.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64321"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "nvme: target: rdma: fix ndev refcount leak on queue connect"
}