GHSA-597p-qxfw-c3vgCriticalCVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix FDP fdpcidx bounds check
The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=, incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1).
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-74361
- https://git.kernel.org/stable/c/0967074f6830718fd2597404ef119bddd0dbfd00
- https://git.kernel.org/stable/c/5d0e7d2af884b91329235abb16652ae4eead8079
- https://git.kernel.org/stable/c/5e406928404d67a8da8aa3ae21732e1ea1a04118
- https://github.com/advisories/GHSA-597p-qxfw-c3vg