CVE-2026-43487: ata: libata-core: Disable LPM on ST1000DM010-2EP102

Q: Which systems are most likely to experience this issue?

Systems running the Linux kernel with an ST1000DM010-2EP102 drive are affected when SATA Link Power Management (LPM) is used. The reported impact is random system freezes.

Q: What is the practical mitigation if an updated kernel cannot be installed immediately?

Disable LPM for the affected ST1000DM010-2EP102 drive. The kernel fix does this by disabling LPM for that drive model.

Q: Does exploiting this issue require remote access or user interaction?

No. The CVSS vector indicates local access, low attack complexity, low privileges, and no user interaction. The reported condition is tied to LPM behavior on the affected drive rather than a remote attack path.

Published May 13, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

ata: libata-core: Disable LPM on ST1000DM010-2EP102

According to a user report, the ST1000DM010-2EP102 has problems with LPM, causing random system freezes. The drive belongs to the same BarraCuda family as the ST2000DM008-2FR102 which has the same issue.

Affected Software

6 affected components

Linux Linux kernel (libata-core)

Linux Linux kernel>=6.9<6.12.78

Linux Linux kernel>=6.13<6.18.19

Linux Linux kernel>=6.19<6.19.9

Linux Linux kernel=7.0-rc1

Linux Linux kernel=7.0-rc2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Linux kernel (libata-core) to a version that resolves this vulnerability.
Patch Disable LPM on ST1000DM010-2EP102
Configuration
In the Linux kernel’s libata-core, disable LPM specifically on ST1000DM010-2EP102 to prevent random system freezes.
ata: libata-core LPM (Link Power Management) = Disable

Event History

May 13, 2026

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

Description

Data Sourced

via NVD·04:16 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are most likely to experience this issue?

Systems running the Linux kernel with an ST1000DM010-2EP102 drive are affected when SATA Link Power Management (LPM) is used. The reported impact is random system freezes.

What is the practical mitigation if an updated kernel cannot be installed immediately?

Disable LPM for the affected ST1000DM010-2EP102 drive. The kernel fix does this by disabling LPM for that drive model.

Does exploiting this issue require remote access or user interaction?

No. The CVSS vector indicates local access, low attack complexity, low privileges, and no user interaction. The reported condition is tied to LPM behavior on the affected drive rather than a remote attack path.

CVE-2026-43487: ata: libata-core: Disable LPM on ST1000DM010-2EP102

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are most likely to experience this issue?

What is the practical mitigation if an updated kernel cannot be installed immediately?

Does exploiting this issue require remote access or user interaction?

Company

Resources

Contact

Frequently Asked Questions

Which systems are most likely to experience this issue?

What is the practical mitigation if an updated kernel cannot be installed immediately?

Does exploiting this issue require remote access or user interaction?