vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-72131

nvme-apple: Prevent shared tags across queues on Apple A11

N/A
Published: August 15, 2026 at 05:53 AM UTC
Updated: October 3, 2026 at 11:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag. Apply the existing workaround for M1 of reserving two tags for the admin queue to A11.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.1.188 ≤ v < 6.1.1896.12.110 ≤ v < 6.12.1116.18 ≤ v < 6.18.406.18 ≤ v < 7.1.56.18 ≤ v < 7.26.6.157 ≤ v < 6.6.1584d8ecf37b5e6d16228a4d37d8548c17cf704616.1.1886.12.1106.186.6.157655b6743bd900df39354e8bb6f1f2f8671fca0047256eed48ce7d78ab9689d84135b77a15454de5589c00b34551e2478041a485b88cf021f1c63228f
Vendor states this is fixed in 0dbec5e5b95ef57279433b285df7dd074085e7a0 (fixed)
Vendor states this is fixed in 2c4baeb1747775d23a0c9d6e9f49e3d9417e3b6d (fixed)
Vendor states this is fixed in 59cef6abc924a84824b0c3f563a7fe74cd5fc7a4 (fixed)
Vendor states this is fixed in 6fe0687245e8406bf26143bd45eb16441bbe5280 (fixed)
Vendor states this is fixed in ad1be9fe255b4affcba6336ccb9145d3e6f06680 (fixed)
Vendor states this is fixed in b7d9aaedf024bb6c0bb6a205848861d888eb1afa (fixed)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (9)

Source: cverecord
https://git.kernel.org/stable/c/59cef6abc924a84824b0c3f563a7fe74cd5fc7a4
Source: cverecord
https://git.kernel.org/stable/c/b7d9aaedf024bb6c0bb6a205848861d888eb1afa
Source: cverecord
https://git.kernel.org/stable/c/6fe0687245e8406bf26143bd45eb16441bbe5280
Source: cverecord
https://git.kernel.org/stable/c/91d3b243bffe5c94503c9a8ea478a080f79ec58e
Source: cverecord
https://git.kernel.org/stable/c/073b9238fac4d1c7727c1d05e3fafad0fd40d451
Source: cverecord
https://git.kernel.org/stable/c/c6a1c94c6705e18e9718737be84d5e6e661f134c
Source: cverecord
https://git.kernel.org/stable/c/2c4baeb1747775d23a0c9d6e9f49e3d9417e3b6d
Source: cverecord
https://git.kernel.org/stable/c/0dbec5e5b95ef57279433b285df7dd074085e7a0

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card