CVE-2026-31523
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time.
Does this matter?
Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There's a brief window during a reset where a hipri task may try to poll that queue before the block layer has updated the queue maps, which would race with the now interrupt driven queue and may cause double completions.
- CVSS 3.1
- 4.7 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.09% probability · 0th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-367
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/0685dd9cb855ab77fcf3577b4702ba1d6df1c98dPatch
- https://git.kernel.org/stable/c/166e31d7dbf6aa44829b98aa446bda5c9580f12aPatch
- https://git.kernel.org/stable/c/6f12734c4b619f923a4df0b1a46b8098b187d324Patch
- https://git.kernel.org/stable/c/965e2c943f065122f14282a88d70a8a92e12a4daPatch
- https://git.kernel.org/stable/c/acbc72dd1a09df53cafcf577259f4678be6afd6dPatch
- https://git.kernel.org/stable/c/b222680ba55e018426c4535067a008f1d81a5d21Patch
- https://git.kernel.org/stable/c/b96c7b25eb1b748f3e3b1832ebf028b0b223d7e3Patch
- https://git.kernel.org/stable/c/ba167d5982e2eb6ff9356d409eca592ce99555daPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.