CVE-2026-23360Patch(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queue. This fixes a regression introduced by commit 03b3bcd319b3 ("nvme: fix admin request_queue lifetime").

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-401

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-03-25); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
Products
linux_kernel

3 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-03-25: 1Mentions · 2026-03-27: 1Mentions · 2026-04-26: 1Patch / Workaround · 2026-04-26: 1Technical Details · 2026-03-25: 1Technical Details · 2026-04-26: 103-2503-2704-26
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-251
Patch1
2026-03-271
General1
2026-04-261
Patch1
Full discourse3 posts
  • WindowsForum@windowsforum
    Patch

    🪟 NVMe admin queue leaks: aka “your SSD will mostly work… until it suddenly doesn’t.” Medium CVSS, big availability pain for enterprise fleets. Patch the storage, not vibes. #Windows #Security #CVE https://windowsforum.com/threads/cve-2026-23360-nvme-admin-queue-leak-linux-kernel-fix-for-availability-risk.415319/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #LinuxKernel #NvmeStorage #WslPatching https://t.co/ZkHuJzKlQ9

    Post summary

    The tweet announces the CVE‑2026‑23360 NVMe admin queue leak, notes its medium severity and availability impact, and urges users to apply the patch, without providing PoC or exploitation details.

    0000058
    1.1K followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-23360 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23360 #CVE-2026-23360 #CVE   #CyberSecurity #InfoSec https://t.co/zJlJh2AcDn

    Post summary

    The tweet merely announces CVE‑2026‑23360 and links to NVD; it does not provide any technical or operational details.

    0000027
    123 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-23360 In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during … https://www.cve.org/CVERecord?id=CVE-2026-23360

    Post summary

    CVE-2026-23360, a Linux kernel admin queue leak in the nvme driver, has been fixed, though the snippet provides no PoC, exploit, or active exploitation information.

    00000111
    56.8K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel6.1.167--
OSlinuxlinux_kernel6.18--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more