CVE-2026-72031

A flaw was found in the Linux kernel's libata-core component. When a PNY CS900 1TB SSD enters Device-Initiated Slumber during idle, it can drop off the bus and become unresponsive. This issue prevents the system from accessing the drive, forcing the filesystem into a read-only state, which results in a Denial of Service (DoS).

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because the risk is strictly tied to physical hardware setups that use a specific consumer solid-state drive (PNY CS900 1TB) attached via SATA. Typical Red Hat Enterprise Linux deployments utilize enterprise-grade storage controllers or run in virtualized environments where this consumer device is not present. Under idle power-saving transitions on affected hardware, the storage link fails to recover, causing the filesystem to drop into read-only mode without enabling privilege escalation, code execution, or data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.