SB2026082841 - Improper locking in Linux kernel intel igc driver
Published: August 28, 2026
Security Bulletin ID
SB2026082841
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper locking (CVE-ID: CVE-2026-80715)
CWE-ID: CWE-667 - Improper Locking
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper state management in igc_down() when tearing down an AF_XDP zero-copy application abruptly. A local user can abruptly terminate an AF_XDP zero-copy application to cause a denial of service.
The issue occurs because NAPI keeps polling and the network interface may never go down.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668
- https://git.kernel.org/stable/c/5ffab5b9589c50e4cfc0cf36ffd76c89422d4019
- https://git.kernel.org/stable/c/605585a8d89aaeb0122e9016fdaa92376897a705
- https://git.kernel.org/stable/c/9a2b637aef4e515c2179774888441d00e8a5ae95
- https://git.kernel.org/stable/c/a0f16c337691813f8d8f014c01fff5a368e08898
- https://git.kernel.org/stable/c/ad6e0df267dc96edb7de1fa0a2fb2a70645bff86
- https://git.kernel.org/stable/c/f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2