---
title: "CVE-2026-93151: Linux kernel nvmet-rdma - Resource Leak"
description: "Linux kernel nvmet-rdma contains a resource leak caused by unreclaimed in-flight response resources during queue teardown, letting attackers cause memory leaks, exploit requires removal of nvme target with rdma transport while I/Os are in flight."
url: https://panop.io/threat-heartbeat/CVE-2026-93151/
---

# CVE-2026-93151 Linux kernel nvmet-rdma - Resource Leak

Linux kernel nvmet-rdma contains a resource leak caused by unreclaimed in-flight response resources during queue teardown, letting attackers cause memory leaks, exploit requires removal of nvme target with rdma transport while I/Os are in flight.

CVSS base score 7.5 /10

High

CISA KEV

Not listed

Public exploit

None known

Authentication

Not required

EPSS

0.67% chance of exploitation in 30 days

[View the NVD record ↗](https://nvd.nist.gov/vuln/detail/CVE-2026-93151)

## Details

Type

Resource Leak

Impact

Denial Of Service

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published

17 September 2026

Updated

15 October 2026

## Vendor fix

Update to the latest Linux kernel version containing the fix for nvmet-rdma resource leak.

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

## References

- [https://nvd.nist.gov/vuln/detail/CVE-2026-93151](https://nvd.nist.gov/vuln/detail/CVE-2026-93151)
- [https://git.kernel.org/stable/c/5cc3b21729d45b5af8f79891f9dedb7e6b6dbd08](https://git.kernel.org/stable/c/5cc3b21729d45b5af8f79891f9dedb7e6b6dbd08)
- [https://git.kernel.org/stable/c/91cfa74f1f3772e8c3662c064a45d8633e00c78e](https://git.kernel.org/stable/c/91cfa74f1f3772e8c3662c064a45d8633e00c78e)
- [https://git.kernel.org/stable/c/9584b3c30e4ee8ca315bdc12249cc6c47cf1a482](https://git.kernel.org/stable/c/9584b3c30e4ee8ca315bdc12249cc6c47cf1a482)
- [https://git.kernel.org/stable/c/ca795fc1d8a1a4ab0e6bd1d27c9adb78d4ed1a1c](https://git.kernel.org/stable/c/ca795fc1d8a1a4ab0e6bd1d27c9adb78d4ed1a1c)
- [https://git.kernel.org/stable/c/d553a9dc1c45666e76d8d2ac9a4f8ff0cbf53a50](https://git.kernel.org/stable/c/d553a9dc1c45666e76d8d2ac9a4f8ff0cbf53a50)
- [https://git.kernel.org/stable/c/0114dd303b373522dea06053aabae34bdd33a7c4](https://git.kernel.org/stable/c/0114dd303b373522dea06053aabae34bdd33a7c4)
- [https://git.kernel.org/stable/c/156ec10a8be2c33b0c279d8b2f4fe8e16fa89ef7](https://git.kernel.org/stable/c/156ec10a8be2c33b0c279d8b2f4fe8e16fa89ef7)

[← All CVEs](https://panop.io/threat-heartbeat/)

## What this record can't tell you

- Whether you run the affected software, and where
- Whether an attacker can actually reach and exploit it
- The misconfigurations that never get a CVE number
- What it would cost the business, ranked into what to fix first

Panop answers these inside your environment, for this CVE and every other finding.

[Book a demo](https://panop.io/demo)