igc: remove napi_synchronize() in igc_down() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.16 % · centile 5 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.
Références
- https://git.kernel.org/stable/c/ad6e0df267dc96edb7de1fa0a2fb2a70645bff86
- https://git.kernel.org/stable/c/605585a8d89aaeb0122e9016fdaa92376897a705
- https://git.kernel.org/stable/c/a0f16c337691813f8d8f014c01fff5a368e08898
- https://git.kernel.org/stable/c/f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2
- https://git.kernel.org/stable/c/3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668
- https://git.kernel.org/stable/c/9a2b637aef4e515c2179774888441d00e8a5ae95
- https://git.kernel.org/stable/c/5ffab5b9589c50e4cfc0cf36ffd76c89422d4019
Références européennes
- ENISA EUVD · EUVD-2026-67450
- GCVE · GCVE-0-2026-80715
Avis du CERT-FR
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected fc9df2a0b520d7d439ecf464794d53e91be74b93 < ad6e0df267dc96edb7de1fa0a2fb2a70645bff86 ; affected fc9df2a0b520d7d439ecf464794d53e91be74b93 < 605585a8d89aaeb0122e9016fdaa92376897a705 ; affected fc9df2a0b520d7d439ecf464794d53e91be74b93 < a0f16c337691813f8d8f014c01fff5a368e08898 ; affected fc9df2a0b520d7d439ecf464794d53e91be74b93 < f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2 ; affected fc9df2a0b520d7d439ecf464794d53e91be74b93 < 3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668 ; affected fc9df2a0b520d7d439ecf464794d53e91be74b93 < 9a2b637aef4e515c2179774888441d00e8a5ae95 |
| Linux · Linux | affected 5.14 ; unaffected 0 < 5.14 ; unaffected 5.15.217 ≤ 5.15.* ; unaffected 6.1.184 ≤ 6.1.* ; unaffected 6.6.153 ≤ 6.6.* ; unaffected 6.12.105 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |