PT-2026-43722 · Linux · Linux Kernel
CVE-2026-45855
·
Published
2026-05-27
·
Updated
2026-07-28
CVSS v4.0
5.8
Medium
| Vector | AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the libata-scsi SAT implementation where non-NCQ (Native Command Queuing) commands can suffer from starvation. When a non-NCQ command is issued while NCQ commands are executing, the
ata scsi qc issue() function returns SCSI MLQUEUE XXX BUSY to defer the command. In environments with host adapters using multiple submission queues and constant NCQ load, these non-NCQ commands may be repeatedly deferred as other queues issue NCQ commands from different CPUs. This results in significant execution delays or complete starvation of non-NCQ commands.To resolve this, the system now uses a
deferred qc field within struct ata port to hold the command instead of forcing a requeue. The deferred command is later processed by the ata scsi deferred qc work() function via the deferred qc work work item once in-flight commands complete, a process managed by the ata scsi schedule deferred qc() helper function called from ata scsi qc complete(). Additionally, the ata scsi requeue deferred qc() function is called from ata eh set pending() to ensure deferred commands are retried after ATA Error Handling (EH) completes.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel