In the Linux kernel, the following vulnerability has been resolved: nvme: use struct group for generic command dwords This will allow the trace event to know the full size of the data intended to be copied and silence read overflow checks.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2025022614-CVE-2022-49614-b2a0@gregkh/T
This CVE has been rejected upstream: https://lore.kernel.org/linux-cve-announce/2025030638-REJECTED-6a6a@gregkh/