CVE-2025-38264
A flaw in the Linux kernel’s NVMe over TCP implementation could let an attacker create a loop in request handling, potentially crashing the system. The issue has been fixed in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel (all distributions using the affected kernel versions).
Real-world impact
An attacker could send a specially crafted R2T PDU to a vulnerable system, causing the kernel to enter an infinite loop while processing NVMe requests, leading to a denial‑of‑service and possible system crash.
Why this severity
The CVSS score is high because the vulnerability requires no authentication, no user interaction, and gives an attacker complete control over the system’s integrity, confidentiality, and availability.
What to do about it
- 011. Check the current kernel version with `uname -r`.
- 022. Update the kernel to a version that includes the nvme‑tcp request list sanitization patch (typically the latest stable release).
- 033. Reboot the system to load the updated kernel.
NVD-referenced vendor advisory
Timeline
- Jul 9, 2025 · Jul 9, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 7d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.