PT-2026-34428 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-31523

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the nvme-pci component. When a user changes the polled queue count at run time, a brief window during a reset may allow a hipri task to poll a queue before the block layer updates the queue maps. This can lead to a conflict with the interrupt driven queue, potentially resulting in double completions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31523

Affected Products

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://twitter.com/CVEnew/status/2046979945906258112 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2047022425460625689 · Twitter Post
• https://git.kernel.org/stable/c/ba167d5982e2eb6ff9356d409eca592ce99555da · Note
• https://git.kernel.org/stable/c/b96c7b25eb1b748f3e3b1832ebf028b0b223d7e3 · Note
• https://git.kernel.org/stable/c/166e31d7dbf6aa44829b98aa446bda5c9580f12a · Note
• https://git.kernel.org/stable/c/b222680ba55e018426c4535067a008f1d81a5d21 · Note
• https://git.kernel.org/stable/c/0685dd9cb855ab77fcf3577b4702ba1d6df1c98d · Note
• https://git.kernel.org/stable/c/acbc72dd1a09df53cafcf577259f4678be6afd6d · Note
• https://git.kernel.org/stable/c/6f12734c4b619f923a4df0b1a46b8098b187d324 · Note
• https://git.kernel.org/stable/c/965e2c943f065122f14282a88d70a8a92e12a4da · Note