Loading story…
CVE-2024-26769 affects the Linux kernel's NVMe over Fabrics Fibre Channel target (nvmet-fc) association-deletion path. During shutdown, deletion of an association can attempt to flush the nested nvmet_wq workqueue, causing a deadlock and potentially denying service on affected systems.
Upstream Linux fixes defer the put operation to a separate work item, eliminating the nested-workqueue flush. Fixed stable releases include Linux 5.15.150, 6.1.80, 6.6.19, 6.7.7, and 6.8; Red Hat shipped fixes for affected RHEL 8 kernel and kernel-rt packages through RHSA-2024:7000 and RHSA-2024:7001, while RHEL 9 kernel variants remained deferred. Red Hat rated the flaw Low severity (CVSS 4.4), citing required local, high-privilege access, and recommends updating to supported kernel releases.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:7000 for the RHEL 8 kernel and RHSA-2024:7001 for the RHEL 8 kernel-rt package to address CVE-2024-26769. Fixes for RHEL 9 kernel variants were listed as deferred.
The Linux kernel CVE team assigned CVE-2024-26769 for a deadlock in the nvmet-fc delete-association shutdown path, where flushing the nested nvmet_wq workqueue can hang tasks and cause denial of service. The upstream remediation defers put work to a separate work item; fixes were included in kernel versions 5.15.150, 6.1.80, 6.6.19, 6.7.7, and 6.8.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourceredhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A **double-free vulnerability** in the Linux kernel's NVMe subsystem, tracked as `CVE-2024-41073`, can let a local attacker trigger **memory corruption** and cause a **denial of service**. The bug occurs when a discard request is retried and then fails before a new special payload is attached, leaving cleanup logic to free the same resource twice unless the `RQF_SPECIAL_PAYLOAD` flag is cleared. The flaw affects `drivers/nvme/host/core.c` and is classified as `CWE-1341`. The Linux kernel CVE team said the issue was fixed in stable releases **5.15.164**, **6.1.101**, **6.6.42**, **6.9.11**, and **6.10**, and advised users to update to the latest stable kernel rather than cherry-picking patches. Red Hat rated the issue **Moderate** for its products with a **CVSS v3 score of 5.5**, noting fixes for multiple **Red Hat Enterprise Linux 8 and 9** kernel packages through RHSA advisories, while **RHEL 6** was listed as not affected; Red Hat also highlighted that external databases assigned higher scores to the same CVE.
Aug 25, 2026
**CVE-2022-50053** is a Linux kernel denial-of-service flaw in the Intel Adaptive Virtual Function (`iavf`) network driver. During rapid virtual-function resets, a VF mailbox initialization failure can send `iavf_reset_task` through an erroneous cleanup path that calls `iavf_close`; this invokes `napi_disable` twice, deadlocking the driver. The resulting lock contention can leave `iavf_remove` blocked, produce hung tasks, and potentially cause a kernel panic. The flaw affects code introduced in Linux kernel 4.14 and was fixed upstream in versions 5.15.63, 5.19.4, and 6.0 by using `iavf_disable_vf` to safely clean up invalid resources. Red Hat rates the issue Moderate with a CVSS v3.1 score of 7.0 and has released fixes for affected RHEL 8, RHEL 9, Red Hat Virtualization 4 for RHEL 8, and RHEL 7 Extended Lifecycle Support packages; RHEL 8 `kernel-rt` remains affected without a qualifying mitigation. Organizations using Intel VF networking should apply the applicable kernel updates or move to a current stable kernel.
Aug 26, 2026
**CVE-2023-52809** affects the Linux kernel SCSI `libfc` component: `fc_lport_ptp_setup()` failed to verify whether `fc_rport_create()` returned `NULL`. A local attacker able to reach the affected Fibre Channel code path could trigger a NULL-pointer dereference, crashing the host and causing denial of service. Red Hat rates the flaw Low severity with a CVSS v3.1 score of 4.4, while NVD assigns 5.5; both identify high availability impact. Linux stable kernels have been fixed across supported branches, and the kernel CVE team advises updating to the latest stable release rather than cherry-picking the patch. Red Hat issued fixes for RHEL 8 and multiple RHEL 9 streams, including RHEL 9 and 9.2 EUS; `kernel-rt` packages for RHEL 8 and RHEL 9 remained affected at publication. RHEL 6 and RHEL 7 kernel packages are outside support scope and should be treated as affected.
Aug 26, 2026