Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer.

Affected versions

Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 97efd7a41aac08b43ea2337c5913a2bc75484f9f (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 0ef4daa6534a510d61ea67c8ad9bb5097b0dd5f8 (git); before 6.18.53 (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.