A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.9. This issue affects the function
nvmet_tcp_build_pdu_iovec of the component nvmet-tcp. The manipulation leads to memory corruption.
This vulnerability is traded as CVE-2026-23112. Access to the local network is required for this attack to succeed. There is no exploit available.
It is advisable to upgrade the affected component.
