CVE-2026-97433

A vulnerability was identified in the Linux kernel 's nvme driver related to how it handles FDP (Flexible Data Placement) configuration descriptors . The issue stems from a lack of validation while walking the FDP configuration log, where a descriptor size (dsze ) of 0 or a descriptor positioned ...

EUVD-2026-86046

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...