Public Security Advisories
Coordinated vulnerability disclosures from Argus. Findings, impact, and remediation, published in good faith.
The device-controlled LBA Data Size (Lbads) field — a full UINT8 (0–255) from the NVMe Identify Namespace response — is used directly as the shift amount in (UINT32)1 << Lbads without any bounds validation.
// No embargoed advisories.