CVE-2026-31523
nvme-pci: ensure we're polling a polled queue
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There's a brief window during a reset where a hipri task may try to poll that queue before the block layer has updated the queue maps, which would race with the now interrupt driven queue and may cause double completions.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.0
References 8
git.kernel.org
- stable/c/965e2c943f065122f14282a88d70a8a92e12a4da
- stable/c/ba167d5982e2eb6ff9356d409eca592ce99555da
- stable/c/0685dd9cb855ab77fcf3577b4702ba1d6df1c98d
- stable/c/6f12734c4b619f923a4df0b1a46b8098b187d324
- stable/c/acbc72dd1a09df53cafcf577259f4678be6afd6d
- stable/c/b96c7b25eb1b748f3e3b1832ebf028b0b223d7e3
- stable/c/b222680ba55e018426c4535067a008f1d81a5d21
- stable/c/166e31d7dbf6aa44829b98aa446bda5c9580f12a