Database/Firmware, BMC & network fabric
NVMe-oF over RDMA: NVMe-over-Fabrics inherits RDMA's lack of authentication
NCVD-0000-006-nvme-of-over-rdmaFirmware, BMC & network fabricNeVerMorecurated
Impact
NVMe-over-Fabrics inherits RDMA's lack of authentication; storage targets are addressable by any host on the fabric, so a compromised tenant node can reach other tenants' namespaces. No CVE — design
Who can reach it
Fabric-local
What to do
Enforce NVMe-oF host NQN allowlisting plus DH-HMAC-CHAP authentication and separate storage fabric; costs throughput and adds provisioning complexity
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.