CVE-2026-93152

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

nvme-apple: Use acquire/release for queue enabled state

apple_nvme_init_queue() initializes queue state and then marks the queue

enabled. The interrupt and request paths check enabled before using that

queue state.

The old wmb() after WRITE_ONCE(enabled, true) does not publish the

earlier initialization before enabled becomes visible. Use a release store

when enabling the queue and acquire loads when testing it.

Although the shutdown-side enabled accesses are not used for publishing

queue initialization, use helpers for them as well for consistency.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References