Medium 4.7Published Apr 22, 2026

CVE-2026-31523nvme-pci: ensure we're polling a polled queue

Updated under an hour ago (Oct 27, 2026, 11:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time. There's a brief window during a reset where a hipri task may try to poll that queue before the block layer has updated the queue maps, which would race with the now interrupt driven queue and may cause double completions.

CVSS: 4.7 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4b04cc6a8f86c4842314def22332de1f15de8523 before 965e2c943f065122f14282a88d70a8a92e12a4da; from 4b04cc6a8f86c4842314def22332de1f15de8523 before ba167d5982e2eb6ff9356d409eca592ce99555da; from 4b04cc6a8f86c4842314def22332de1f15de8523 before 0685dd9cb855ab77fcf3577b4702ba1d6df1c98d; from 4b04cc6a8f86c4842314def22332de1f15de8523 before 6f12734c4b619f923a4df0b1a46b8098b187d324; from 4b04cc6a8f86c4842314def22332de1f15de8523 before acbc72dd1a09df53cafcf577259f4678be6afd6d; from 4b04cc6a8f86c4842314def22332de1f15de8523 before b96c7b25eb1b748f3e3b1832ebf028b0b223d7e3; from 4b04cc6a8f86c4842314def22332de1f15de8523 before b222680ba55e018426c4535067a008f1d81a5d21; from 4b04cc6a8f86c4842314def22332de1f15de8523 before 166e31d7dbf6aa44829b98aa446bda5c9580f12a	CNA record
linux linux_kernel linux:linux_kernel	from 5.0 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.131; from 6.7 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 7.0; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/965e2c943f065122f14282a88d70a8a92e12a4da	patch
https://git.kernel.org/stable/c/ba167d5982e2eb6ff9356d409eca592ce99555da	patch
https://git.kernel.org/stable/c/0685dd9cb855ab77fcf3577b4702ba1d6df1c98d	patch
https://git.kernel.org/stable/c/6f12734c4b619f923a4df0b1a46b8098b187d324	patch
https://git.kernel.org/stable/c/acbc72dd1a09df53cafcf577259f4678be6afd6d	patch
https://git.kernel.org/stable/c/b96c7b25eb1b748f3e3b1832ebf028b0b223d7e3	patch
https://git.kernel.org/stable/c/b222680ba55e018426c4535067a008f1d81a5d21	patch
https://git.kernel.org/stable/c/166e31d7dbf6aa44829b98aa446bda5c9580f12a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.