SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72031

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the PNY CS900 1TB SSD, which can drop off the bus during idle periods due to its Device-Initiated Slumber feature, leading to filesystem read-only states. This issue is particularly relevant for systems utilizing this specific SSD model, as it can disrupt normal operations and data access. Organizations using the PNY CS900 SSD should prioritize applying the patch that adds a NOLPM quirk to ensure stable link performance and prevent potential data integrity issues.

CVE
CVE-2026-72031
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less) drops off the bus after entering Device-Initiated Slumber during idle. With the default med_power_with_dipm policy the link goes down (SStatus 1 SControl 300) and does not recover, forcing the filesystem read-only. Forcing max_performance keeps the link stable across prolonged idle. Add a NOLPM quirk so link power management is disabled for this drive specifically, leaving it intact for other devices on the host.