CVE-2026-43449

A flaw was found in the Linux kernel's Non-Volatile Memory Express (NVMe) PCI driver. An incorrect loop condition in the nvme_dbbuf_set function allows a local attacker with low privileges to cause a slab-out-of-bounds write. This memory corruption vulnerability can lead to information disclosure, denial of service, or potentially privilege escalation.

A Moderate slab-out-of-bounds flaw was found in the nvme-pci kernel module. This vulnerability could allow a local attacker to cause a system crash or potentially escalate privileges by triggering the flaw when NVMe PCI devices are in use and the nvme module is loaded.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.