---
id: CVE-2026-72131
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  nvme-apple: Prevent shared tags across queues on Apple A11

  On Apple A11, tags of pending commands must be unique across the admin
  and IO queues, else the firmware cras…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  nvme-apple: Prevent shared tags across queues on Apple A11

  On Apple A11, tags of pending commands must be unique across the admin
  and IO queues, else the firmware cras…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 655b6743bd900df39354e8bb6f1f2f8671fca004 <
    91d3b243bffe5c94503c9a8ea478a080f79ec58e
  - >-
    Linux >= 7256eed48ce7d78ab9689d84135b77a15454de55 <
    073b9238fac4d1c7727c1d05e3fafad0fd40d451
  - >-
    Linux >= 89c00b34551e2478041a485b88cf021f1c63228f <
    2c4baeb1747775d23a0c9d6e9f49e3d9417e3b6d
  - >-
    Linux >= 04d8ecf37b5e06d16228a4d37d8548c17cf70461 <
    59cef6abc924a84824b0c3f563a7fe74cd5fc7a4
  - >-
    Linux >= 04d8ecf37b5e06d16228a4d37d8548c17cf70461 <
    b7d9aaedf024bb6c0bb6a205848861d888eb1afa
  - >-
    Linux >= 04d8ecf37b5e06d16228a4d37d8548c17cf70461 <
    6fe0687245e8406bf26143bd45eb16441bbe5280
  - Linux >= 6.12.110 < 6.12.111
  - Linux 6.18
published: '2026-08-15'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T14:17:16.993'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72131'
references:
  - url: 'https://git.kernel.org/stable/c/073b9238fac4d1c7727c1d05e3fafad0fd40d451'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2c4baeb1747775d23a0c9d6e9f49e3d9417e3b6d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/59cef6abc924a84824b0c3f563a7fe74cd5fc7a4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6fe0687245e8406bf26143bd45eb16441bbe5280'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/91d3b243bffe5c94503c9a8ea478a080f79ec58e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b7d9aaedf024bb6c0bb6a205848861d888eb1afa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c6a1c94c6705e18e9718737be84d5e6e661f134c'
tags:
  - nvd
  - cve.org
epss: 0.00205
epssPercentile: 0.10897
ingestedAt: '2026-09-14T15:23:07.456Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

nvme-apple: Prevent shared tags across queues on Apple A11

On Apple A11, tags of pending commands must be unique across the admin
and IO queues, else the firmware crashes with
"duplicate tag error for tag N", with N being the tag.

Apply the existing workaround for M1 of reserving two tags for the admin
queue to A11.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.