Description
On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID.
An attacker with network access to the NVMe/TCP target can trigger an unauthenticated Denial of Service condition on the affected machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeBSD | FreeBSD | 15.0-RELEASE – < p5 | p5 |
Advisories 1
- WID-SEC-2026-0878 FreeBSD Project FreeBSD OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 21, 2026