CVE-2026-74361
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix FDP fdpcidx bounds check
The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=, incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 30b5f20bb2ddab013035399e5c7e6577da49320a < 5e406928404d67a8da8aa3ae21732e1ea1a04118 | affected |
| Linux | Linux | 30b5f20bb2ddab013035399e5c7e6577da49320a < 5d0e7d2af884b91329235abb16652ae4eead8079 | affected |
| Linux | Linux | 30b5f20bb2ddab013035399e5c7e6577da49320a < 0967074f6830718fd2597404ef119bddd0dbfd00 | affected |
| Linux | Linux | 6.16 | affected |
| Linux | Linux | 0 < 6.16 | unaffected |
| Linux | Linux | 6.18.40 <= 6.18.* | unaffected |
| Linux | Linux | 7.1.5 <= 7.1.* | unaffected |
| Linux | Linux | 7.2 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/5e406928404d67a8da8aa3ae21732e1ea1a04118
- https://git.kernel.org/stable/c/5d0e7d2af884b91329235abb16652ae4eead8079
- https://git.kernel.org/stable/c/0967074f6830718fd2597404ef119bddd0dbfd00
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.