SB20260320111 - Resource exhaustion in Linux kernel nvme host driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Resource exhaustion (CVE-ID: CVE-2026-23244)

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper input validation in the nvme_pr_read_keys() function when processing a user-provided num_keys value. A local user can send a specially crafted request with a large num_keys value to cause excessive memory allocation attempts, leading to a denial of service.

Exploitation requires local system access and the ability to invoke NVMe ioctl commands. No authentication beyond standard system access is required.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/15fb6d627484ee39ed73e202ef4720e1fa5c898e
• https://git.kernel.org/stable/c/5a501379a010690ae9ae88bef62a1bae1aca32e6
• https://git.kernel.org/stable/c/baef52d80093bd686e70b3cb7e0512a40ae76705
• https://git.kernel.org/stable/c/c3320153769f05fd7fe9d840cb555dd3080ae424