CVE-2026-64020: Linux

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma_vec allocation was getting leaked on the completion.

Affected products

• Linux Linux: from 6.17, before 7.0.11 (fixed in 7.0.11)

Published 2026-07-19. Last modified 2026-07-30.