Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43449

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set dev->online_queues is a count incremented in nvme_init_queue. Thus, valid indices are 0 through dev->online_queues − 1. This patch fixes the loop condition to ensure the index stays within the valid range. Index 0 is excluded because it is the admin queue. KASAN splat: ================================================================== BUG: KASAN: slab-out-of-bounds in nvme_
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f61321a6b1cc7957f575df6761f0cdf79cb2bf16a74360b5309d26e96d69d9f0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/nvme/host/pci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/nvme/host/pci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2b9d605c3f0d3262142f196249cd3bd58c857c71","status":"affected","version":"0f0d2c876c96d4908a9ef40959a44bec21bdd6cf","versionType":"git"},{"lessThan":"86183d550559e45e07059bbdf17331fea469e38c","status":"affected","version":"0f0d2c876c96d4908a9ef40959a44bec21bdd6cf","versionType":"git"},{"lessThan":"d7990c936e25f484b61a5adeeadc1d290a9fd16e","status":"affected","version":"0f0d2c876c96d4908a9ef4…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/nvme/host/pci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/nvme/host/pci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2b9d605c3f0d3262142f196249cd3bd58c857c71","status":"affected","version":"0f0d2c876c96d4908a9ef40959a44bec21bdd6cf","versionType":"git"},{"lessThan":"86183d550559e45e07059bbdf17331fea469e38c","status":"affected","version":"0f0d2c876c96d4908a9ef40959a44bec21bdd6cf","versionType":"git"},{"lessThan":"d7990c936e25f484b61a5adeeadc1d290a9fd16e","status":"affected","version":"0f0d2c876c96d4908a9ef4…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/2b9d605c3f0d3262142f196249cd3bd58c857c71"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/328c551f0cc81ee776b186b86cc6e5253bb6fda7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/50bad78f03a02d3c0f228edf9912b494d3e7acb9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/78279d2d74c58a0ed64e43cf601a02649771182e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/83e6edd6358326c9c2de31a54bb4a1ec50703f1f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/86183d550559e45e07059bbdf17331fea469e38c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/b4e78f1427c7d6859229ae9616df54e1fc05a516"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/d7990c936e25f484b61a5adeeadc1d290a9fd16e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00edf60149ee5e2bcf535f1cb97efff952ebdd1d1fa310dd40ce4f33de48c6 · sha256:887beb9462e982a7… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer