CVE-2026-97409

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests in io target before it is initialized A new nvme-fc controller in CONNECTING state sees admin request timeout schedules ctrl->ioerr_work to abort inflight requests. This ends up calling __nvme_fc_abort_outstanding_ios() which aborts requests in both admin and io tagsets. In case fc_ctrl->tag_set was not initialized we see the warning below. This is because ctrl.queue_count is initialized early in nvme_fc_alloc_ctrl(). nvme nvme0: NVME-FC{0}: starting error recovery Connectivity Loss INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe lpfc 0000:ab:00.0: queue 0 connect admin queue failed (-6). you didn't initialize this object before use? turning off the locking correctness validator. Workqueue: nvme-reset-wq nvme_fc_ctrl_ioerr_work [nvme_fc] Call Trace: <TASK> dump_stack_lvl+0x57/0x80 register_lock_class+0x567/0x580 __lock_acquire+0x330/0xb90 lock_acquire.part.0+0xad/0x210 blk_mq_tagset_busy_iter+0xf9/0xc00 __nvme_fc_abort_outstanding_ios+0x23f/0x320 [nvme_fc] nvme_fc_ctrl_ioerr_work+0x172/0x210 [nvme_fc] process_one_work+0x82c/0x1450 worker_thread+0x5ee/0xfd0 kthread+0x3a0/0x750 ret_from_fork+0x439/0x670 ret_from_fork_asm+0x1a/0x30 </TASK> Update the check in __nvme_fc_abort_outstanding_ios() confirm that io tagset was created before iterating over busy requests. Also make sure to cancel ctrl->ioerr_work before removing io tagset.

• https://git.kernel.org/stable/c/da930308b4bc24c335574e85ca84ff70a988cf05
• https://git.kernel.org/stable/c/dd39064d2948b14dbe4f364fe4b3c9cfc632cc21
• https://git.kernel.org/stable/c/ee38469f88492df99e1d97f03aa40ecfd218934f

Published

Sep 24, 2026

Last Modified

Sep 25, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-97387Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2026-9739Vulnerable to DNS rebinding attacks when using SSE (http://b…9.4
• CVE-2026-9740A vulnerability in MongoDB Server's BSON validation logic al…8.7
• CVE-2026-97404In OpenStack Zaqar before 22.0.2, WSGI transport mishandles …9.2
• CVE-2026-97407In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97408In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9741A bug in query analysis processing of the $vectorSearch aggr…7.1
• CVE-2026-97410In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97411In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97412In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97413In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-97414In the Linux kernel, the following vulnerability has been re…