Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of any list, otherwise a malicious R2T PDU might inject a loop in request list processing.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Microsoft publishes details on CVE-2025-38264 and CVE-2024-41007, critical flaws in TCP and NVMe over TCP that may impact systems using these protocols. Review and apply mitigations. #CVE https://threatcluster.io/cluster/cve-2025-38264-and-cve-2024-41007-published-by-microsoft-9d2bb47a
Post summary
Microsoft announced critical vulnerabilities in TCP and NVMe over TCP, advising users to review and apply mitigations.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |