Threats Tagged 'cve-2026-45855'

A vulnerability in the Linux kernel's libata-scsi subsystem can cause starvation of non-NCQ SCSI commands when multiple submission queues are used and the device is under constant NCQ command load. This results in very long delays or complete starvation of non-NCQ commands. The issue arises because non-NCQ commands are repeatedly deferred while NCQ commands continue to be issued, violating forward progress guarantees. The fix implements a mechanism to ensure non-NCQ commands are eventually processed by deferring their requeueing and managing command issuance accordingly.

A vulnerability in the Linux kernel's Serial ATA (SATA) subsystem could cause starvation of non-NCQ commands when multiple submission queues are used under heavy NCQ load, leading to long delays or complete starvation of non-NCQ commands. This issue affects various Linux kernel versions and has been addressed in updated kernel releases. The vulnerability has a medium severity with a CVSS score of 5.5 and does not impact confidentiality or integrity but affects availability. A patch is available and should be applied to affected systems.