# CVE-2026-89970

Use-after-free in Linux nvmet auth allows kernel memory corruption (CVSS 9.8)

- Page: https://www.vulneraibility.com/cve/CVE-2026-89970
- CVSS: 9.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.80% (percentile 56.7)
- Published: 2026-09-16

## Affected versions

- Linux: affected >= 1a70200f404ae210b4f0334e3936e84f8edb6bc8 and < 664022fa1c93f4eba09ef5ee02411b9709dd7a93; >= 1a70200f404ae210b4f0334e3936e84f8edb6bc8 and < c3c126a6142a1335bc8c34a5607c39cf01daf295; >= 1a70200f404ae210b4f0334e3936e84f8edb6bc8 and < c17c87bde6d6f5252a6a6f0a94b2430164aa28d5; >= 1a70200f404ae210b4f0334e3936e84f8edb6bc8 and < 7555ddd60af72df2862dd8f9b730a9848577edda; >= 1a70200f404ae210b4f0334e3936e84f8edb6bc8 and < eb4f9127a2b8a152743f1ee597627e2f69cb54fe; >= 1a70200f404ae210b4f0334e3936e84f8edb6bc8 and < eaa948c0e19b1bb2d93262207bca0c3d19cc3406; 6.0; fixed in < 6.0, >= 6.1.188 and <= 6.1.*, >= 6.6.157 and <= 6.6.*, >= 6.12.110 and <= 6.12.*, >= 6.18.51 and <= 6.18.*, >= 7.2.5 and <= 7.2.*, >= 7.3-rc2 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Race in nvmet auth teardown can cause use-after-free, leading to kernel memory corruption and potential privilege escalation or system crash by clients with NVMe target access.

## Action

Immediate action required

## Recommendation

Apply kernel updates with nvmet fix or vendor patch immediately; restrict NVMe target access until patched.

## References

- [other] https://git.kernel.org/stable/c/664022fa1c93f4eba09ef5ee02411b9709dd7a93
- [other] https://git.kernel.org/stable/c/c3c126a6142a1335bc8c34a5607c39cf01daf295
- [other] https://git.kernel.org/stable/c/c17c87bde6d6f5252a6a6f0a94b2430164aa28d5
- [other] https://git.kernel.org/stable/c/7555ddd60af72df2862dd8f9b730a9848577edda
- [other] https://git.kernel.org/stable/c/eb4f9127a2b8a152743f1ee597627e2f69cb54fe
- [other] https://git.kernel.org/stable/c/eaa948c0e19b1bb2d93262207bca0c3d19cc3406

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.