In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD… (CVE-2026-72031)
A vulnerability in the Linux kernel's libata-core subsystem affected the PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less). The drive would drop off the bus after entering Device-Initiated Slumber during idle, causing the link to go down and the filesystem to become read-only. This issue was resolved by adding a NOLPM quirk that disables link power management specifically for this drive, preventing the problem while preserving power management for other devices.
AI Analysis
Technical Summary
The Linux kernel libata-core module had a vulnerability where the PNY CS900 1TB SSD would disconnect after entering Device-Initiated Slumber due to link power management policies. This caused the SATA link to go down and not recover, forcing the filesystem into a read-only state. The fix involved adding a NOLPM (No Link Power Management) quirk for this specific SSD model, disabling link power management only for this device to maintain stability without affecting other devices on the host system.
Potential Impact
Affected systems using the PNY CS900 1TB SSD could experience the drive dropping off the bus after idle periods, leading to the SATA link going down and the filesystem becoming read-only. This could disrupt normal system operations and data access until a reboot or manual intervention. No evidence of active exploitation is known.
Mitigation Recommendations
A fix is available in the Linux kernel that adds a NOLPM quirk for the PNY CS900 1TB SSD, disabling link power management for this device. Users should update to a Linux kernel version that includes this patch to resolve the issue. No other mitigation is required as the fix addresses the problem specifically.
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD… (CVE-2026-72031)
Description
A vulnerability in the Linux kernel's libata-core subsystem affected the PNY CS900 1TB SSD (Phison PS3111-S11, DRAM-less). The drive would drop off the bus after entering Device-Initiated Slumber during idle, causing the link to go down and the filesystem to become read-only. This issue was resolved by adding a NOLPM quirk that disables link power management specifically for this drive, preventing the problem while preserving power management for other devices.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel libata-core module had a vulnerability where the PNY CS900 1TB SSD would disconnect after entering Device-Initiated Slumber due to link power management policies. This caused the SATA link to go down and not recover, forcing the filesystem into a read-only state. The fix involved adding a NOLPM (No Link Power Management) quirk for this specific SSD model, disabling link power management only for this device to maintain stability without affecting other devices on the host system.
Potential Impact
Affected systems using the PNY CS900 1TB SSD could experience the drive dropping off the bus after idle periods, leading to the SATA link going down and the filesystem becoming read-only. This could disrupt normal system operations and data access until a reboot or manual intervention. No evidence of active exploitation is known.
Mitigation Recommendations
A fix is available in the Linux kernel that adds a NOLPM quirk for the PNY CS900 1TB SSD, disabling link power management for this device. Users should update to a Linux kernel version that includes this patch to resolve the issue. No other mitigation is required as the fix addresses the problem specifically.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hr25-grq7-6pp2
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72031"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b78bf8831d539502189
Added to database: 08/15/2026, 15:53:28 UTC
Last enriched: 08/15/2026, 17:09:17 UTC
Last updated: 08/15/2026, 18:21:06 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.