Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-97433

nvme: validate FDP configuration descriptor sizes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 30b5f20bb2ddab013035399e5c7e6577da49320a to < 97efd7a41aac08b43ea2337c5913a2bc75484f9faffected
  • 30b5f20bb2ddab013035399e5c7e6577da49320a to < 0ef4daa6534a510d61ea67c8ad9bb5097b0dd5f8affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References