CVE-2026-98153
Linux: nvme: fix racy access to FDP placement id array
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.08%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 56e1c6bbe4bb084d7ecf61698afdf70be23dd35fLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix racy access to FDP placement id array
nvme_query_fdp_info() is called per-path and therefore prone to races.
It populates head->nr_plids/head->plids for fdp registration. But nothing protects that pair from concurrent access - two paths scanning the same namespace can race to populate it.
Avoid the race by moving this initialization work to nvme_alloc_ns_head() which is called once per shared namespace.
Text from CVE List
Affected versions 6
- Linuxaffected: 30b5f20bb2ddab013035399e5c7e6577da49320a before e0a23e3c8c4c3ce11529fa70d2292b4e56d143baCVE List
- Linuxaffected: 30b5f20bb2ddab013035399e5c7e6577da49320a before 56e1c6bbe4bb084d7ecf61698afdf70be23dd35fCVE List
- Linuxaffected: 6.16CVE List
- Linuxunaffected: all versions before 6.16CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List