CVE-2026-72131: nvme-apple: Prevent shared tags across queues on Apple A11
In the Linux kernel, the following vulnerability has been resolved:
nvme-apple: Prevent shared tags across queues on Apple A11
On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag.
Apply the existing workaround for M1 of reserving two tags for the admin queue to A11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
For the workaround for M1, reserve two tags for the admin so that tags used for pending commands remain unique across the admin when sharing tags would otherwise trigger the firmware crash.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72131?
The severity of CVE-2026-72131 is classified as risk 28.
How do I fix CVE-2026-72131?
To fix CVE-2026-72131, ensure that commands use unique tags across the admin and IO queues on Apple A11.
What systems are affected by CVE-2026-72131?
CVE-2026-72131 affects the Linux kernel on Apple A11 devices.
What happens if CVE-2026-72131 is exploited?
Exploitation of CVE-2026-72131 can lead to firmware crashes due to duplicate tag errors.
When was CVE-2026-72131 published?
CVE-2026-72131 was published on August 15, 2026.