Riskcovery

CVE-2026-46105

scsi: mpt3sas: Limit NVMe request size to 2 MiB

State
Published
Severity
7.8 High
Published
May 28, 2026
Updated
Aug 5, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Limit NVMe request size to 2 MiB

The HBA firmware reports NVMe MDTS values based on the underlying drive capability. However, because the driver allocates a fixed 4K buffer for the PRP list, accommodating at most 512 entries, the driver supports a maximum I/O transfer size of 2 MiB.

Limit max_hw_sectors to the smaller of the reported MDTS and the 2 MiB driver limit to prevent issuing oversized I/O that may lead to a kernel oops.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9b8b84879d4adc506b0d3944e20b28d9f3f6994b to before 45dcc815fc5539e88154315f36cbcb11d3a52fc2Affected
  • 9b8b84879d4adc506b0d3944e20b28d9f3f6994b to before e5f9824817c6358b9f9738bdb92dec9e4e794d3cAffected
  • 9b8b84879d4adc506b0d3944e20b28d9f3f6994b to before 04631f55afc543d5431a2bdee7f6cc0f2c0debe7Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.