CVE-2026-72131

high

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmware crashes with "duplicate tag error for tag N", with N being the tag. Apply the existing workaround for M1 of reserving two tags for the admin queue to A11.

References

https://git.kernel.org/stable/c/b7d9aaedf024bb6c0bb6a205848861d888eb1afa

https://git.kernel.org/stable/c/ad1be9fe255b4affcba6336ccb9145d3e6f06680

https://git.kernel.org/stable/c/6fe0687245e8406bf26143bd45eb16441bbe5280

https://git.kernel.org/stable/c/59cef6abc924a84824b0c3f563a7fe74cd5fc7a4

https://git.kernel.org/stable/c/2c4baeb1747775d23a0c9d6e9f49e3d9417e3b6d

https://git.kernel.org/stable/c/0dbec5e5b95ef57279433b285df7dd074085e7a0

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-58889

Details

Source: Mitre, NVD

Published: 2026-08-15

Updated: 2026-10-03

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.4

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00215