CVE-2026-72031: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
The PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less) drops off the bus after entering Device-Initiated Slumber during idle. With the default medpowerwithdipm policy the link goes down (SStatus 1 SControl 300) and does not recover, forcing the filesystem read-only. Forcing maxperformance keeps the link stable across prolonged idle.
Add a NOLPM quirk so link power management is disabled for this drive specifically, leaving it intact for other devices on the host.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (ata/libata)to a version that resolves this vulnerability.Patch ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD - Configuration
Add a NOLPM quirk for the PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less) so link power management is disabled for this drive. Leave other devices on the host unchanged.
Linux kernel libata (ata NOLPM quirk) NOLPM (disable Link Power Management) = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72031?
The severity of CVE-2026-72031 is rated at 20.
How does CVE-2026-72031 affect PNY CS900 1TB SSD?
CVE-2026-72031 causes the PNY CS900 1TB SSD to drop off the bus after entering Device-Initiated Slumber during idle.
How do I fix CVE-2026-72031?
To fix CVE-2026-72031, apply the latest updates from the Linux kernel that implement the NOLPM quirk.
Is CVE-2026-72031 specific to certain SSDs?
Yes, CVE-2026-72031 specifically affects the PNY CS900 1TB SSD with a Phison PS3111-S11 controller.
What configuration is affected by CVE-2026-72031?
CVE-2026-72031 is affected by the default med_power_with_dipm power policy in the Linux kernel.