PT-2026-44228 · Opensuse+1 · Opensuse Tumbleweed+1
Published
2026-05-28
·
Updated
2026-06-04
·
CVE-2026-46105
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description
An issue exists in the
mpt3sas SCSI driver where the HBA firmware reports NVMe MDTS (Maximum Data Transfer Size) values based on drive capability. Because the driver uses a fixed 4K buffer for the PRP (Physical Region Page) list, it can only accommodate 512 entries, limiting the maximum I/O transfer size to 2 MiB. Issuing I/O requests that exceed this 2 MiB limit can lead to a kernel oops, which is a type of kernel panic or error that occurs when the system encounters a critical failure.**Recommendations
For openSUSE Tumbleweed, update to kernel-devel-7.0.11-1.1.
At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Opensuse Tumbleweed