High severity7.8NVD Advisory· Published May 28, 2026· Updated May 30, 2026

CVE-2026-46105

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Limit NVMe request size to 2 MiB

The HBA firmware reports NVMe MDTS values based on the underlying drive capability. However, because the driver allocates a fixed 4K buffer for the PRP list, accommodating at most 512 entries, the driver supports a maximum I/O transfer size of 2 MiB.

Limit max_hw_sectors to the smaller of the reported MDTS and the 2 MiB driver limit to prevent issuing oversized I/O that may lead to a kernel oops.

Affected products

Linux/Kernelllm-fuzzy
Linux/mpt3sasllm-fuzzy
osv-coords2 versions
pkg:linux/kernel pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
>= 6.17.0, < 6.18.30+ 1 more
- (no CPE)range: >= 6.17.0, < 6.18.30
- (no CPE)range: < 7.0.11-1.1

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/04631f55afc543d5431a2bdee7f6cc0f2c0debe7nvd
git.kernel.org/stable/c/45dcc815fc5539e88154315f36cbcb11d3a52fc2nvd
git.kernel.org/stable/c/e5f9824817c6358b9f9738bdb92dec9e4e794d3cnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000