CVE-2026-31523: nvme-pci: ensure we're polling a polled queue
In the Linux kernel, the following vulnerability has been resolved:
nvme-pci: ensure we're polling a polled queue
A user can change the polled queue count at run time. There's a brief window during a reset where a hipri task may try to poll that queue before the block layer has updated the queue maps, which would race with the now interrupt driven queue and may cause double completions.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31523?
CVE-2026-31523 is classified as a moderate severity vulnerability due to potential impacts during a reset of the polled queue.
How do I fix CVE-2026-31523?
To fix CVE-2026-31523, update your Linux kernel to the latest stable version where the vulnerability has been resolved.
What does CVE-2026-31523 affect?
CVE-2026-31523 affects the nvme-pci component of the Linux kernel.
What is the nature of the vulnerability in CVE-2026-31523?
The vulnerability in CVE-2026-31523 allows a user to change the polled queue count at run time, potentially leading to issues during queue polling.
Is CVE-2026-31523 exploitable by an attacker?
While CVE-2026-31523 presents a risk, successful exploitation requires specific conditions to be met during the reset process.