What’s Vulnerable › Vulnerabilities

CVE-2026-72031: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less) drops off the bus after entering Device-Initiated Slumber during idle. With the default med_power_with_dipm policy the link goes down (SStatus 1 SControl 300) and does not recover, forcing the filesystem read-only. Forcing max_performance keeps the link stable across prolonged idle. Add a NOLPM quirk so link power management is disabled for this drive specifically, leaving it intact for other devices on the host.

Affected products

• Linux kernel: 6.9 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a2c89d538fd4fca07c6ebe4fe03cc932f962441
• https://git.kernel.org/stable/c/299739909c486bcea7445f5c3b066fdbc0d2df96
• https://git.kernel.org/stable/c/462775c620197adaabc983ce847e5b9878ff4cb0
• https://git.kernel.org/stable/c/eb94157a86cef9a151ccd4bc52faae1853d0fa0c

Get alerted when CVE-2026-72031 or the next vulnerability affects your stack