CVE-2026-74361

A flaw was found in the NVMe Non-Volatile Memory Express subsystem of the Linux kernel. An incorrect bounds check in the Flexible Data Placement FDP fdpcidx function allows an out-of-bounds access. This occurs because the check incorrectly accepts an index value that is beyond the intended...

CVE-2026-74361

In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used instead of =, incorrectly accepting fdpidx when it equals n i.e. NUMFDPC + 1...