CVE-2026-72031ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less) drops off the bus after entering Device-Initiated Slumber during idle. With the default med_power_with_dipm policy the link goes down (SStatus 1 SControl 300) and does not recover, forcing the filesystem read-only. Forcing max_performance keeps the link stable across prolonged idle. Add a NOLPM quirk so link power management is disabled for this drive specifically, leaving it intact for other devices on the host.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 7627a0edef548c4c4dea62df51cc26bfe5bbcab8 builds before 0a2c89d538fd4fca07c6ebe4fe03cc932f962441; from 7627a0edef548c4c4dea62df51cc26bfe5bbcab8 before 299739909c486bcea7445f5c3b066fdbc0d2df96; from 7627a0edef548c4c4dea62df51cc26bfe5bbcab8 before 462775c620197adaabc983ce847e5b9878ff4cb0 | CNA record |
References
- https://git.kernel.org/stable/c/0a2c89d538fd4fca07c6ebe4fe03cc932f962441
- https://git.kernel.org/stable/c/299739909c486bcea7445f5c3b066fdbc0d2df96
- https://git.kernel.org/stable/c/462775c620197adaabc983ce847e5b9878ff4cb0
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.