CVE-2026-74384

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write issue exists in the nvme-multipath component. The struct nvme ns head contains a flexible array member current path[] that is indexed using the NUMA node ID via the numa node id() function. The memory allocation for this structure incorrectly uses num possible nodes(), which assumes NUMA node IDs are sequential and densely packed. On certain architectures, such as powerpc, NUMA node IDs can be sparse, meaning the actual node ID may exceed the total number of possible nodes. This leads to memory accesses outside the allocated boundary when the array is indexed by a sparse NUMA node ID, resulting in a slab-out-of-bounds error in the nvme mpath revalidate paths() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.