Improper locking in Linux kernel - CVE-2026-80715
Published: August 28, 2026
Vulnerability identifier: #VU146060
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80715
CWE-ID: CWE-667
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper state management in igc_down() when tearing down an AF_XDP zero-copy application abruptly. A local user can abruptly terminate an AF_XDP zero-copy application to cause a denial of service.
The issue occurs because NAPI keeps polling and the network interface may never go down.
Affected software
Linux kernel
How to mitigate CVE-2026-80715
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668
- https://git.kernel.org/stable/c/5ffab5b9589c50e4cfc0cf36ffd76c89422d4019
- https://git.kernel.org/stable/c/605585a8d89aaeb0122e9016fdaa92376897a705
- https://git.kernel.org/stable/c/9a2b637aef4e515c2179774888441d00e8a5ae95
- https://git.kernel.org/stable/c/a0f16c337691813f8d8f014c01fff5a368e08898
- https://git.kernel.org/stable/c/ad6e0df267dc96edb7de1fa0a2fb2a70645bff86
- https://git.kernel.org/stable/c/f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2