CVE-2026-90008

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the megaraid sas driver where the megasas make prp nvme() function fails to check buffer bounds when building a Physical Region Page (PRP) list in cmd->sg frame. The PRP list is constructed in a DMA pool buffer of instance->max chain frame sz bytes. Due to an increase in the block layer default maximum sectors, transfers can require more entries than the buffer can hold, leading to a buffer overflow. This can result in a kernel page fault or silent corruption of neighboring pool entries, which may contain PRP lists for other in-flight commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.