Polling Queue Vulnerability in Linux Kernel Affects Multiple Distributions

CVE-2026-31523

What is CVE-2026-31523?

In the Linux kernel, a vulnerability exists in the nvme-pci component that allows a user to modify the polled queue count at runtime. During specific reset conditions, there is a potential race condition where a high-priority task may attempt to poll a queue that hasn't yet been updated by the block layer. This discrepancy could lead to double completions and impact system performance. Addressing this issue is crucial for maintaining the reliability and integrity of systems using the Linux kernel.

References