CVE-2026-46105

A flaw was found in the mpt3sas driver within the Linux kernel. This vulnerability allows for oversized Non-Volatile Memory Express (NVMe) input/output (I/O) operations due to improper size limitations. An attacker or a malicious NVMe device could exploit this by issuing I/O requests that exceed the driver's supported maximum. The primary consequence is a kernel oops, which can lead to a system crash.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local access or the presence of specific NVMe storage hardware connected through the mpt3sas host bus adapter, limiting the attack surface to systems utilizing these controllers. Systems without Broadcom or LSI SAS3/NVMe HBAs, or those where unprivileged users cannot issue low-level storage commands, remain unaffected by this flaw. Even on susceptible hardware configurations, the blast radius is confined to a denial of service via a kernel crash rather than confidentiality or integrity compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.