nvme-apple: Use acquire/release for queue enabled state
Summary
| CVE | CVE-2026-93152 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-17 17:18:10 UTC |
| Updated | 2026-09-17 17:18:10 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state apple_nvme_init_queue() initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb() after WRITE_ONCE(enabled, true) does not publish the earlier initialization before enabled becomes visible. Use a release store when enabling the queue and acquire loads when testing it. Although the shutdown-side enabled accesses are not used for publishing queue initialization, use helpers for them as well for consistency. |
Risk And Classification
EPSS: 0.002050000 probability, percentile 0.109390000 (date 2026-09-18)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 5bd2927aceba181b84286e00aa2f56e117e699c3 cbe53ecd696e354bfda8173364f7595759bc562d git | Not specified |
| CNA | Linux | Linux | affected 5bd2927aceba181b84286e00aa2f56e117e699c3 86782a72c6d8c7541813b9ddb009668468601f18 git | Not specified |
| CNA | Linux | Linux | affected 5bd2927aceba181b84286e00aa2f56e117e699c3 0e9d9fe12da779516dc3899dc9141304675f5416 git | Not specified |
| CNA | Linux | Linux | affected 5bd2927aceba181b84286e00aa2f56e117e699c3 e5a79244a3c526a76d930f2ef30aff64528b0c6a git | Not specified |
| CNA | Linux | Linux | affected 5bd2927aceba181b84286e00aa2f56e117e699c3 840ab22ffa4d859ca40a31e96fc3554688e7a035 git | Not specified |
| CNA | Linux | Linux | affected 5bd2927aceba181b84286e00aa2f56e117e699c3 f61c934aa084b7440fec681be3f4b481eb5a8609 git | Not specified |
| CNA | Linux | Linux | affected 5.19 | Not specified |
| CNA | Linux | Linux | unaffected 5.19 semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.188 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.157 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.110 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.52 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.2.6 7.2.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.3-rc1 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/0e9d9fe12da779516dc3899dc9141304675f5416 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/cbe53ecd696e354bfda8173364f7595759bc562d | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/840ab22ffa4d859ca40a31e96fc3554688e7a035 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/f61c934aa084b7440fec681be3f4b481eb5a8609 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/86782a72c6d8c7541813b9ddb009668468601f18 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/e5a79244a3c526a76d930f2ef30aff64528b0c6a | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.