Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 30b5f20bb2ddab013035399e5c7e6577da49320a before 97efd7a41aac08b43ea2337c5913a2bc75484f9f; affected 30b5f20bb2ddab013035399e5c7e6577da49320a before 0ef4daa6534a510d61ea67c8ad9bb5097b0dd5f8 |
| Linux / Linux | affected 6.16; unaffected 0 before 6.16; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.