CVE-2026-93152

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state apple_nvme_init_queue() initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb() after WRITE_ONCE(enabled, true) does not publish the earlier initialization before enabled becomes visible. Use a release store when enabling the queue and acquire loads when testing it. Although the shutdown-side enabled accesses are not used for publishing queue initialization, use helpers for them as well for consistency.

SeverityUnknown
CVSS—
Exploit probability12. percentile0.2%
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linuxcbe53ecd696e354bfda8173364f7595759bc562d, 86782a72c6d8c7541813b9ddb009668468601f18, 0e9d9fe12da779516dc3899dc9141304675f5416, e5a79244a3c526a76d930f2ef30aff64528b0c6a, 840ab22ffa4d859ca40a31e96fc3554688e7a035, f61c934aa084b7440fec681be3f4b481eb5a8609 or later

Affected products

ProductAffected versionsFixed in
Linux Linux5bd2927aceba181b84286e00aa2f56e117e699c3 ≤ v < cbe53ecd696e354bfda8173364f7595759bc562d, 5bd2927aceba181b84286e00aa2f56e117e699c3 ≤ v < 86782a72c6d8c7541813b9ddb009668468601f18, 5bd2927aceba181b84286e00aa2f56e117e699c3 ≤ v < 0e9d9fe12da779516dc3899dc9141304675f5416, 5bd2927aceba181b84286e00aa2f56e117e699c3 ≤ v < e5a79244a3c526a76d930f2ef30aff64528b0c6a, 5bd2927aceba181b84286e00aa2f56e117e699c3 ≤ v < 840ab22ffa4d859ca40a31e96fc3554688e7a035, 5bd2927aceba181b84286e00aa2f56e117e699c3 ≤ v < f61c934aa084b7440fec681be3f4b481eb5a8609, 5.19cbe53ecd696e354bfda8173364f7595759bc562d, 86782a72c6d8c7541813b9ddb009668468601f18, 0e9d9fe12da779516dc3899dc9141304675f5416, e5a79244a3c526a76d930f2ef30aff64528b0c6a, 840ab22ffa4d859ca40a31e96fc3554688e7a035, f61c934aa084b7440fec681be3f4b481eb5a8609

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-93152 · Linux · Dark Radar